./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3899564825 <...> [ 4.301652][ T100] udevd[100]: starting version 3.2.11 [ 4.375329][ T101] udevd[101]: starting eudev-3.2.11 [ 4.376551][ T100] udevd (100) used greatest stack depth: 22096 bytes left [ 8.252657][ T103] udevd (103) used greatest stack depth: 21296 bytes left [ 11.729690][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 11.729704][ T30] audit: type=1400 audit(1732438140.502:61): avc: denied { transition } for pid=221 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.737597][ T30] audit: type=1400 audit(1732438140.502:62): avc: denied { noatsecure } for pid=221 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.742313][ T30] audit: type=1400 audit(1732438140.512:63): avc: denied { write } for pid=221 comm="sh" path="pipe:[14798]" dev="pipefs" ino=14798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 11.747729][ T30] audit: type=1400 audit(1732438140.512:64): avc: denied { rlimitinh } for pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.750555][ T30] audit: type=1400 audit(1732438140.512:65): avc: denied { siginh } for pid=221 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. execve("./syz-executor3899564825", ["./syz-executor3899564825"], 0x7ffc850cb5d0 /* 10 vars */) = 0 brk(NULL) = 0x55558ce1a000 brk(0x55558ce1ad40) = 0x55558ce1ad40 arch_prctl(ARCH_SET_FS, 0x55558ce1a3c0) = 0 set_tid_address(0x55558ce1a690) = 294 set_robust_list(0x55558ce1a6a0, 24) = 0 rseq(0x55558ce1ace0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3899564825", 4096) = 28 getrandom("\xbd\xe7\x03\xa0\xf5\x3f\xb0\x83", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558ce1ad40 brk(0x55558ce3bd40) = 0x55558ce3bd40 brk(0x55558ce3c000) = 0x55558ce3c000 mprotect(0x7f7546724000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 295 ./strace-static-x86_64: Process 295 attached [pid 295] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] mkdir("./syzkaller.XihasZ", 0700 [pid 294] <... clone resumed>, child_tidptr=0x55558ce1a690) = 296 ./strace-static-x86_64: Process 296 attached [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] set_robust_list(0x55558ce1a6a0, 24 [pid 295] <... mkdir resumed>) = 0 [pid 295] chmod("./syzkaller.XihasZ", 0777) = 0 [pid 295] chdir("./syzkaller.XihasZ") = 0 ./strace-static-x86_64: Process 297 attached [pid 294] <... clone resumed>, child_tidptr=0x55558ce1a690) = 297 [pid 296] <... set_robust_list resumed>) = 0 [pid 295] mkdir("./0", 0777 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... mkdir resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 294] <... clone resumed>, child_tidptr=0x55558ce1a690) = 298 ./strace-static-x86_64: Process 298 attached [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] set_robust_list(0x55558ce1a6a0, 24 [pid 296] getrandom(./strace-static-x86_64: Process 299 attached [pid 298] set_robust_list(0x55558ce1a6a0, 24 [pid 297] <... set_robust_list resumed>) = 0 [pid 296] <... getrandom resumed>"\x33\x84\x53\x63\x02\x5b\x67\x2e", 8, GRND_NONBLOCK) = 8 [pid 295] <... openat resumed>) = 3 [pid 294] <... clone resumed>, child_tidptr=0x55558ce1a690) = 299 [pid 296] mkdir("./syzkaller.7gDcM6", 0700) = 0 [pid 296] chmod("./syzkaller.7gDcM6", 0777) = 0 [pid 296] chdir("./syzkaller.7gDcM6") = 0 [pid 296] mkdir("./0", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3 [pid 297] mkdir("./syzkaller.nQU8cu", 0700 [pid 296] <... close resumed>) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... mkdir resumed>) = 0 [pid 296] <... clone resumed>, child_tidptr=0x55558ce1a690) = 300 [pid 297] chmod("./syzkaller.nQU8cu", 0777) = 0 [pid 297] chdir("./syzkaller.nQU8cu") = 0 [pid 297] mkdir("./0", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 301 [pid 298] <... set_robust_list resumed>) = 0 [pid 298] mkdir("./syzkaller.FxceQ0", 0700) = 0 [pid 298] chmod("./syzkaller.FxceQ0", 0777) = 0 [pid 298] chdir("./syzkaller.FxceQ0") = 0 [pid 298] mkdir("./0", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 303 [pid 299] set_robust_list(0x55558ce1a6a0, 24 [pid 295] ioctl(3, LOOP_CLR_FD [pid 299] <... set_robust_list resumed>) = 0 [pid 299] mkdir("./syzkaller.eAgVux", 0700 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... mkdir resumed>) = 0 [pid 295] <... clone resumed>, child_tidptr=0x55558ce1a690) = 304 [pid 299] chmod("./syzkaller.eAgVux", 0777) = 0 [pid 299] chdir("./syzkaller.eAgVux") = 0 [pid 299] mkdir("./0", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 301 attached ./strace-static-x86_64: Process 300 attached ) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 305 ./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 305] chdir("./0") = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] set_robust_list(0x55558ce1a6a0, 24 [pid 300] set_robust_list(0x55558ce1a6a0, 24 [pid 301] <... set_robust_list resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 [pid 305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 305] write(1, "executing program\n", 18executing program ) = 18 [pid 305] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 305] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[306]}, 88) = 306 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x7f75466579a0, 24) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 22.151593][ T30] audit: type=1400 audit(1732438150.932:66): avc: denied { execmem } for pid=294 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.158928][ T30] audit: type=1400 audit(1732438150.932:67): avc: denied { read write } for pid=295 comm="syz-executor389" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 22.162828][ T30] audit: type=1400 audit(1732438150.942:68): avc: denied { open } for pid=295 comm="syz-executor389" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 306] <... futex resumed>) = 1 [pid 306] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 306] <... futex resumed>) = 1 [pid 306] memfd_create("syzkaller", 0) = 5 [pid 306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 301] chdir("./0"./strace-static-x86_64: Process 303 attached [pid 300] <... set_robust_list resumed>) = 0 [pid 301] <... chdir resumed>) = 0 [pid 303] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] chdir("./0" [pid 301] <... prctl resumed>) = 0 [pid 300] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 304 attached [pid 303] chdir("./0" [pid 301] setpgid(0, 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] <... chdir resumed>) = 0 [pid 301] <... setpgid resumed>) = 0 [pid 304] set_robust_list(0x55558ce1a6a0, 24 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... prctl resumed>) = 0 [pid 304] <... set_robust_list resumed>) = 0 [pid 303] <... prctl resumed>) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] setpgid(0, 0 [pid 303] setpgid(0, 0 [pid 301] <... openat resumed>) = 3 [pid 303] <... setpgid resumed>) = 0 [pid 300] <... setpgid resumed>) = 0 [pid 301] write(3, "1000", 4 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... write resumed>) = 4 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] close(3 [pid 304] chdir("./0" [pid 300] <... openat resumed>) = 3 [pid 303] <... openat resumed>) = 3 [pid 304] <... chdir resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 300] write(3, "1000", 4 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] write(3, "1000", 4 [pid 301] symlink("/dev/binderfs", "./binderfs" [pid 300] <... write resumed>) = 4 [pid 304] <... prctl resumed>) = 0 [pid 303] <... write resumed>) = 4 executing program [pid 301] <... symlink resumed>) = 0 [pid 303] close(3 [pid 300] close(3 [pid 304] setpgid(0, 0 [pid 303] <... close resumed>) = 0 [pid 301] write(1, "executing program\n", 18 [pid 300] <... close resumed>) = 0 [pid 304] <... setpgid resumed>) = 0 [pid 303] symlink("/dev/binderfs", "./binderfs" [pid 301] <... write resumed>) = 18 [pid 300] symlink("/dev/binderfs", "./binderfs"executing program executing program [pid 303] <... symlink resumed>) = 0 [pid 303] write(1, "executing program\n", 18 [pid 301] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... symlink resumed>) = 0 [pid 303] <... write resumed>) = 18 [pid 301] <... futex resumed>) = 0 [pid 300] write(1, "executing program\n", 18 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 303] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 300] <... write resumed>) = 18 [pid 304] <... openat resumed>) = 3 [pid 303] <... futex resumed>) = 0 [pid 301] <... rt_sigaction resumed>NULL, 8) = 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] write(3, "1000", 4 [pid 303] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 301] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 300] <... futex resumed>) = 0 [pid 304] <... write resumed>) = 4 [pid 303] <... rt_sigaction resumed>NULL, 8) = 0 [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 304] close(3 [pid 303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] <... rt_sigaction resumed>NULL, 8) = 0 [pid 304] <... close resumed>) = 0 [pid 303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... mmap resumed>) = 0x7f7546637000 [pid 300] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 304] symlink("/dev/binderfs", "./binderfs" [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 303] <... mmap resumed>) = 0x7f7546637000 [pid 301] <... mprotect resumed>) = 0 [pid 300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 303] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] <... mmap resumed>) = 0x7f7546637000 [pid 304] <... symlink resumed>) = 0 [pid 303] <... mprotect resumed>) = 0 [pid 304] write(1, "executing program\n", 18 [pid 301] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITEexecuting program [pid 304] <... write resumed>) = 18 [pid 303] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 300] <... mprotect resumed>) = 0 [pid 301] <... clone3 resumed> => {parent_tid=[308]}, 88) = 308 [pid 303] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [pid 304] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 301] rt_sigprocmask(SIG_SETMASK, [], [pid 300] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 309 attached [pid 304] <... futex resumed>) = 0 [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 309] set_robust_list(0x7f75466579a0, 24 [pid 304] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 303] <... clone3 resumed> => {parent_tid=[309]}, 88) = 309 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... set_robust_list resumed>) = 0 [pid 304] <... rt_sigaction resumed>NULL, 8) = 0 [pid 303] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... futex resumed>) = 0 [pid 300] <... clone3 resumed> => {parent_tid=[310]}, 88) = 310 [pid 309] rt_sigprocmask(SIG_SETMASK, [], [pid 304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] rt_sigprocmask(SIG_SETMASK, [], [pid 309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 303] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 304] <... mmap resumed>) = 0x7f7546637000 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 309] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 304] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 304] <... mprotect resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] bpf(BPF_MAP_CREATE, NULL, 0 [pid 304] <... rt_sigprocmask resumed>[], 8) = 0 [pid 303] <... futex resumed>) = 0 [pid 309] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... clone3 resumed> => {parent_tid=[311]}, 88) = 311 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 311 attached [pid 309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] rt_sigprocmask(SIG_SETMASK, [], [pid 303] <... futex resumed>) = 0 [pid 311] set_robust_list(0x7f75466579a0, 24 [pid 309] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... set_robust_list resumed>) = 0 [pid 309] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] rt_sigprocmask(SIG_SETMASK, [], [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 309] <... futex resumed>) = 1 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 0 [pid 311] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... bpf resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 308 attached [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] set_robust_list(0x7f75466579a0, 24 [pid 303] <... futex resumed>) = 0 [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] <... set_robust_list resumed>) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 1 [pid 309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] rt_sigprocmask(SIG_SETMASK, [], [pid 304] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 308] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 304] <... futex resumed>) = 0 [pid 311] bpf(BPF_MAP_CREATE, NULL, 0 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x7f75466579a0, 24) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 22.184596][ T30] audit: type=1400 audit(1732438150.942:69): avc: denied { ioctl } for pid=296 comm="syz-executor389" path="/dev/loop1" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... futex resumed>) = 1 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 1 [pid 309] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 304] <... futex resumed>) = 0 [pid 311] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = 0 [pid 310] bpf(BPF_MAP_CREATE, NULL, 0 [pid 308] bpf(BPF_MAP_CREATE, NULL, 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 0 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 301] <... futex resumed>) = 0 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... futex resumed>) = 0 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 301] <... futex resumed>) = 0 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 301] <... futex resumed>) = 0 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 308] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... socket resumed>) = 3 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 308] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 308] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... bpf resumed>) = 4 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 308] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 308] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 308] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 308] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 308] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 308] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 308] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... sendmsg resumed>) = 20 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 308] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 308] memfd_create("syzkaller", 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 308] <... memfd_create resumed>) = 5 [pid 308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 309] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 311] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 22.240478][ T30] audit: type=1400 audit(1732438150.962:70): avc: denied { prog_load } for pid=305 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 22.259795][ T30] audit: type=1400 audit(1732438150.962:71): avc: denied { map_create } for pid=305 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 22.279644][ T30] audit: type=1400 audit(1732438150.962:72): avc: denied { bpf } for pid=305 comm="syz-executor389" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 1 [pid 310] <... futex resumed>) = 0 [pid 309] <... futex resumed>) = 1 [pid 304] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 310] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 303] <... futex resumed>) = 0 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... socket resumed>) = 3 [pid 304] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 22.300726][ T30] audit: type=1400 audit(1732438150.962:73): avc: denied { perfmon } for pid=305 comm="syz-executor389" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 22.321820][ T30] audit: type=1400 audit(1732438150.962:74): avc: denied { create } for pid=305 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [pid 311] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 1 [pid 310] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 309] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... futex resumed>) = 1 [pid 309] <... bpf resumed>) = 4 [pid 300] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 310] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 309] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 0 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 311] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 311] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 310] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 309] <... futex resumed>) = 1 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 309] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 1 [pid 304] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 1 [pid 309] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 310] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 0 [pid 311] <... socket resumed>) = 3 [pid 310] <... socket resumed>) = 3 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 1 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... bpf resumed>) = 4 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 0 [pid 311] <... futex resumed>) = 0 [pid 310] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 309] <... sendmsg resumed>) = 20 [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... bpf resumed>) = 4 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 1 [pid 304] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 311] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 310] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 0 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] memfd_create("syzkaller", 0 [pid 303] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 1 [pid 309] <... memfd_create resumed>) = 5 [pid 304] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... mmap resumed>) = 0x7f753e237000 [pid 304] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 310] <... futex resumed>) = 0 [pid 311] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 311] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 304] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 311] <... sendmsg resumed>) = 20 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 310] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 311] memfd_create("syzkaller", 0 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 311] <... memfd_create resumed>) = 5 [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 310] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 0 [pid 311] <... mmap resumed>) = 0x7f753e237000 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 300] <... futex resumed>) = 1 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 310] memfd_create("syzkaller", 0) = 5 [pid 310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [ 22.342635][ T30] audit: type=1400 audit(1732438150.962:75): avc: denied { map_read map_write } for pid=305 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [pid 308] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 311] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 306] <... write resumed>) = 20699119 [pid 309] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 306] munmap(0x7f753e237000, 138412032 [pid 310] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 306] <... munmap resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 306] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 306] close(5) = 0 [pid 306] close(6 [pid 308] <... write resumed>) = 20699119 [pid 306] <... close resumed>) = 0 [pid 306] mkdir("./file4", 0777) = 0 [ 22.572677][ T306] loop4: detected capacity change from 0 to 40427 [pid 306] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 308] munmap(0x7f753e237000, 138412032) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 308] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 308] close(5) = 0 [ 22.641833][ T308] loop2: detected capacity change from 0 to 40427 [ 22.673633][ T306] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [pid 308] close(6 [pid 310] <... write resumed>) = 20699119 [pid 310] munmap(0x7f753e237000, 138412032) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 310] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 310] close(5) = 0 [pid 310] close(6 [pid 308] <... close resumed>) = 0 [pid 308] mkdir("./file4", 0777) = 0 [pid 308] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 311] <... write resumed>) = 20699119 [pid 311] munmap(0x7f753e237000, 138412032 [pid 309] <... write resumed>) = 20699119 [pid 309] munmap(0x7f753e237000, 138412032 [pid 311] <... munmap resumed>) = 0 [pid 311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 311] ioctl(6, LOOP_SET_FD, 5 [pid 309] <... munmap resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 309] ioctl(6, LOOP_SET_FD, 5 [pid 311] <... ioctl resumed>) = 0 [pid 311] close(5) = 0 [pid 311] close(6 [pid 309] <... ioctl resumed>) = 0 [pid 309] close(5) = 0 [ 22.692169][ T306] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 22.699157][ T310] loop1: detected capacity change from 0 to 40427 [ 22.710222][ T306] F2FS-fs (loop4): fault_injection options not supported [ 22.717218][ T306] F2FS-fs (loop4): fault_type options not supported [ 22.728725][ T311] loop0: detected capacity change from 0 to 40427 [ 22.728773][ T309] loop3: detected capacity change from 0 to 40427 [pid 309] close(6 [pid 310] <... close resumed>) = 0 [pid 310] mkdir("./file4", 0777) = 0 [pid 310] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 311] <... close resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 311] mkdir("./file4", 0777) = 0 [pid 309] mkdir("./file4", 0777 [pid 311] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 309] <... mkdir resumed>) = 0 [ 22.736531][ T306] F2FS-fs (loop4): invalid crc value [ 22.748496][ T310] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 22.755595][ T310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 22.755975][ T306] F2FS-fs (loop4): Found nat_bits in checkpoint [ 22.770346][ T308] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 22.777113][ T308] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 22.786551][ T311] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 22.793413][ T311] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 22.793620][ T310] F2FS-fs (loop1): fault_injection options not supported [ 22.801945][ T308] F2FS-fs (loop2): fault_injection options not supported [ 22.815485][ T308] F2FS-fs (loop2): fault_type options not supported [ 22.815608][ T309] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 22.815662][ T311] F2FS-fs (loop0): fault_injection options not supported [ 22.832951][ T309] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 22.844927][ T310] F2FS-fs (loop1): fault_type options not supported [ 22.851770][ T311] F2FS-fs (loop0): fault_type options not supported [ 22.858669][ T308] F2FS-fs (loop2): invalid crc value [ 22.865563][ T310] F2FS-fs (loop1): invalid crc value [ 22.872525][ T309] F2FS-fs (loop3): fault_injection options not supported [ 22.872610][ T311] F2FS-fs (loop0): invalid crc value [ 22.880265][ T309] F2FS-fs (loop3): fault_type options not supported [ 22.885691][ T308] F2FS-fs (loop2): Found nat_bits in checkpoint [ 22.906513][ T310] F2FS-fs (loop1): Found nat_bits in checkpoint [ 22.911214][ T309] F2FS-fs (loop3): invalid crc value [ 22.918293][ T306] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 22.926375][ T306] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 22.934000][ T311] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 309] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 306] <... mount resumed>) = 0 [pid 306] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 306] chdir("./file4") = 0 [pid 306] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 306] ioctl(6, LOOP_CLR_FD) = 0 [pid 306] close(6) = 0 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [ 22.935035][ T309] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] fspick(AT_FDCWD, ".", 0) = 7 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 EINVAL (Invalid argument) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 1 [pid 306] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... sendto resumed>) = 36 [pid 306] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=305}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 22.986805][ T306] F2FS-fs (loop4): switch discard_unit option is not allowed [ 22.998759][ T306] attempt to access beyond end of device [ 22.998759][ T306] loop4: rw=2049, want=53256, limit=40427 [ 23.012801][ T306] attempt to access beyond end of device [ 23.012801][ T306] loop4: rw=0, want=53256, limit=40427 [ 23.024528][ T308] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 306] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 1 [pid 306] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] <... mount resumed>) = 0 [pid 308] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 308] chdir("./file4") = 0 [pid 308] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] ioctl(6, LOOP_CLR_FD [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... ioctl resumed>) = 0 [pid 308] close(6 [pid 310] <... mount resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] fspick(AT_FDCWD, ".", 0) = 7 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 310] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 306] <... futex resumed>) = 0 [pid 306] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... openat resumed>) = 5 [pid 310] chdir("./file4") = 0 [pid 310] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 310] ioctl(6, LOOP_CLR_FD [pid 308] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 310] <... ioctl resumed>) = 0 [pid 310] close(6) = 0 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 23.035272][ T308] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 23.043142][ T310] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 23.050472][ T310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 23.060740][ T308] F2FS-fs (loop2): switch discard_unit option is not allowed [ 23.069780][ T309] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 23.070667][ T308] attempt to access beyond end of device [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 306] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 0 [pid 308] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] sendfile(6, 6, NULL, 281483568746501 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 308] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=301}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 308] <... futex resumed>) = 1 [pid 308] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 308] <... futex resumed>) = 1 [pid 308] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 308] <... futex resumed>) = 1 [pid 308] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 308] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] exit_group(0) = ? [pid 308] <... futex resumed>) = ? [pid 308] +++ exited with 0 +++ [pid 301] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=4, si_stime=20} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 309] <... mount resumed>) = 0 [pid 306] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 306] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... futex resumed>) = 0 [pid 306] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 306] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 306] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 305] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 305] <... futex resumed>) = 0 [pid 306] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 306] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] exit_group(0 [pid 306] <... futex resumed>) = ? [pid 305] <... exit_group resumed>) = ? [pid 306] +++ exited with 0 +++ [pid 305] +++ exited with 0 +++ [pid 309] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 309] chdir("./file4") = 0 [pid 310] <... futex resumed>) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 309] ioctl(6, LOOP_CLR_FD) = 0 [pid 310] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=4, si_stime=29} --- [pid 311] <... mount resumed>) = 0 [pid 309] close(6 [pid 311] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 310] <... open resumed>) = 6 [pid 309] <... close resumed>) = 0 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] <... futex resumed>) = 1 [pid 299] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 297] newfstatat(3, "", [pid 299] newfstatat(3, "", [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, [pid 299] getdents64(3, [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./0/binderfs", [pid 299] newfstatat(AT_FDCWD, "./0/binderfs", [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./0/binderfs" [pid 299] unlink("./0/binderfs" [pid 297] <... unlink resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 297] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 311] <... openat resumed>) = 5 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] chdir("./file4") = 0 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 311] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 309] <... open resumed>) = 6 [pid 311] <... openat resumed>) = 6 [pid 311] ioctl(6, LOOP_CLR_FD) = 0 [pid 311] close(6) = 0 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [ 23.070667][ T308] loop2: rw=2049, want=53256, limit=40427 [ 23.079700][ T311] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 23.089176][ T308] attempt to access beyond end of device [ 23.089176][ T308] loop2: rw=0, want=53256, limit=40427 [ 23.099925][ T309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 23.111941][ T311] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 23.125881][ T297] attempt to access beyond end of device [ 23.125881][ T297] loop2: rw=2049, want=45104, limit=40427 [pid 309] fspick(AT_FDCWD, ".", 0 [pid 310] <... futex resumed>) = 0 [pid 309] <... fspick resumed>) = 7 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] fspick(AT_FDCWD, ".", 0) = 7 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] <... futex resumed>) = 1 [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 0 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... futex resumed>) = 1 [pid 310] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 311] <... futex resumed>) = 0 [pid 311] fspick(AT_FDCWD, ".", 0) = 7 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 309] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... futex resumed>) = 0 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 1 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 309] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 1 [pid 311] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 309] <... open resumed>) = 8 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 310] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... open resumed>) = 8 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 303] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 310] <... futex resumed>) = 0 [ 23.137643][ T299] attempt to access beyond end of device [ 23.137643][ T299] loop4: rw=2049, want=45104, limit=40427 [ 23.146290][ T309] F2FS-fs (loop3): switch discard_unit option is not allowed [ 23.160413][ T310] F2FS-fs (loop1): switch discard_unit option is not allowed [ 23.168144][ T311] F2FS-fs (loop0): switch discard_unit option is not allowed [pid 310] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... open resumed>) = 8 [pid 310] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] <... futex resumed>) = 1 [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 310] sendfile(6, 6, NULL, 281483568746501 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 1 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 0 [pid 309] sendfile(6, 6, NULL, 281483568746501 [pid 311] <... futex resumed>) = 0 [pid 310] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 311] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 311] sendfile(6, 6, NULL, 281483568746501 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 311] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... sendto resumed>) = 36 [pid 304] <... futex resumed>) = 0 [pid 311] recvfrom(3, [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=304}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 311] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 304] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 311] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 23.187979][ T310] attempt to access beyond end of device [ 23.187979][ T310] loop1: rw=2049, want=53256, limit=40427 [ 23.188432][ T309] attempt to access beyond end of device [ 23.188432][ T309] loop3: rw=2049, want=53256, limit=40427 [ 23.221711][ T310] attempt to access beyond end of device [ 23.221711][ T310] loop1: rw=0, want=53256, limit=40427 [ 23.223289][ T309] attempt to access beyond end of device [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 311] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 311] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 311] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 304] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 311] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 311] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 311] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] exit_group(0 [pid 311] <... futex resumed>) = ? [pid 304] <... exit_group resumed>) = ? [pid 311] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ [pid 300] <... futex resumed>) = 0 [pid 309] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=5, si_stime=23} --- [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... restart_syscall resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] <... futex resumed>) = 0 [pid 309] <... futex resumed>) = 1 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 309] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 295] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... sendto resumed>) = 36 [pid 309] <... sendto resumed>) = 36 [pid 295] <... openat resumed>) = 3 [pid 309] recvfrom(3, [pid 295] newfstatat(3, "", [pid 309] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=303}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 310] recvfrom(3, [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] getdents64(3, [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 309] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 295] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=300}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 295] newfstatat(AT_FDCWD, "./0/binderfs", [pid 310] <... futex resumed>) = 1 [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 303] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 300] <... futex resumed>) = 0 [pid 295] unlink("./0/binderfs" [pid 310] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 309] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 295] <... unlink resumed>) = 0 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] <... futex resumed>) = 1 [pid 300] <... futex resumed>) = 0 [pid 310] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 309] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 310] <... futex resumed>) = 0 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 1 [pid 309] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 309] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] <... futex resumed>) = 0 [pid 309] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 303] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 303] <... futex resumed>) = 0 [pid 309] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 309] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] exit_group(0 [pid 309] <... futex resumed>) = ? [pid 303] <... exit_group resumed>) = ? [pid 309] +++ exited with 0 +++ [pid 303] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=5, si_stime=27} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 23.223289][ T309] loop3: rw=0, want=53256, limit=40427 [pid 298] unlink("./0/binderfs") = 0 [pid 298] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 310] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 300] <... futex resumed>) = 0 [pid 310] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 310] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] exit_group(0 [pid 310] <... futex resumed>) = ? [pid 300] <... exit_group resumed>) = ? [pid 310] +++ exited with 0 +++ [pid 300] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=5, si_stime=24} --- [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 296] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./0/binderfs") = 0 [pid 296] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./0/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./0/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./0/file4") = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./0") = 0 [pid 299] mkdir("./1", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 336 ./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 336] chdir("./1") = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 336] symlink("/dev/binderfs", "./binderfs") = 0 [pid 336] write(1, "executing program\n", 18executing program ) = 18 [pid 336] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 336] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 336] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 336] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[337]}, 88) = 337 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x7f75466579a0, 24) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 337] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... sendmsg resumed>) = 20 [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 337] memfd_create("syzkaller", 0) = 5 [pid 337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./0/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./0/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./0/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./0") = 0 [pid 297] mkdir("./1", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 338 ./strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 338] chdir("./1") = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 338] write(1, "executing program\n", 18) = 18 [pid 338] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 338] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 338] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[339]}, 88) = 339 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x7f75466579a0, 24) = 0 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 339] <... futex resumed>) = 1 [pid 339] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 339] <... futex resumed>) = 1 [pid 339] memfd_create("syzkaller", 0) = 5 [pid 339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./0/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./0/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./0/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./0") = 0 [pid 298] mkdir("./1", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 340 ./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 340] chdir("./1") = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 340] write(1, "executing program\n", 18executing program ) = 18 [pid 340] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 340] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 340] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 340] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 340] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[341]}, 88) = 341 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 341 attached [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] set_robust_list(0x7f75466579a0, 24 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... set_robust_list resumed>) = 0 [pid 341] rt_sigprocmask(SIG_SETMASK, [], [pid 296] <... umount2 resumed>) = 0 [pid 341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 341] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 341] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 341] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 341] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 341] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 341] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... socket resumed>) = 3 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 341] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... bpf resumed>) = 4 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 341] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 341] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 341] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 341] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... sendmsg resumed>) = 20 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 0 [pid 340] <... futex resumed>) = 1 [pid 341] memfd_create("syzkaller", 0 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 341] <... memfd_create resumed>) = 5 [pid 341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 296] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./0/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./0/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./0/file4") = 0 [pid 295] <... umount2 resumed>) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./0") = 0 [pid 296] mkdir("./1", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./0/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... clone resumed>, child_tidptr=0x55558ce1a690) = 342 [pid 295] umount2("./0/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./0/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./0/file4") = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./0") = 0 [pid 295] mkdir("./1", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x55558ce1a6a0, 24 [pid 295] close(3executing program [pid 342] <... set_robust_list resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 342] chdir("./1" [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 342] <... chdir resumed>) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] <... clone resumed>, child_tidptr=0x55558ce1a690) = 343 [pid 342] <... prctl resumed>) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 342] write(1, "executing program\n", 18) = 18 [pid 342] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 342] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[344]}, 88) = 344 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 344 attached ./strace-static-x86_64: Process 343 attached [pid 344] set_robust_list(0x7f75466579a0, 24) = 0 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 343] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 343] chdir("./1" [pid 344] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 343] <... chdir resumed>) = 0 [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 343] <... prctl resumed>) = 0 [pid 344] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 343] setpgid(0, 0 [pid 344] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... setpgid resumed>) = 0 [pid 344] <... futex resumed>) = 1 [pid 344] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 344] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] <... openat resumed>) = 3 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 343] write(3, "1000", 4 [pid 344] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 343] <... write resumed>) = 4 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] close(3 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 343] <... close resumed>) = 0 [pid 343] symlink("/dev/binderfs", "./binderfs" [pid 344] <... bpf resumed>) = 4 [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... symlink resumed>) = 0 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 executing program [pid 344] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 343] write(1, "executing program\n", 18) = 18 [pid 344] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 344] <... futex resumed>) = 1 [pid 344] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 343] <... futex resumed>) = 0 [pid 344] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... rt_sigaction resumed>NULL, 8) = 0 [pid 344] <... futex resumed>) = 1 [pid 343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 344] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 343] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 344] <... sendmsg resumed>) = 20 [pid 343] <... mprotect resumed>) = 0 [pid 343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[345]}, 88) = 345 [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] rt_sigprocmask(SIG_SETMASK, [], [pid 342] <... futex resumed>) = 0 [pid 343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 343] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = 1 [pid 344] memfd_create("syzkaller", 0) = 5 [pid 344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 339] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 345 attached [pid 345] set_robust_list(0x7f75466579a0, 24) = 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 343] <... futex resumed>) = 0 [pid 345] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 345] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... socket resumed>) = 3 [pid 343] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 0 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... bpf resumed>) = 4 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 345] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 343] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 0 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 345] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 345] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 345] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... sendmsg resumed>) = 20 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 345] memfd_create("syzkaller", 0 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 345] <... memfd_create resumed>) = 5 [pid 345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 337] <... write resumed>) = 20699119 [pid 337] munmap(0x7f753e237000, 138412032) = 0 [pid 337] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 337] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 344] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 341] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 337] close(5) = 0 [pid 337] close(6 [pid 339] <... write resumed>) = 20699119 [ 23.751429][ T337] loop4: detected capacity change from 0 to 40427 [pid 345] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 339] munmap(0x7f753e237000, 138412032) = 0 [pid 339] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 339] ioctl(6, LOOP_SET_FD, 5 [pid 337] <... close resumed>) = 0 [pid 337] mkdir("./file4", 0777) = 0 [pid 337] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 339] <... ioctl resumed>) = 0 [pid 339] close(5) = 0 [ 23.809155][ T339] loop2: detected capacity change from 0 to 40427 [ 23.811550][ T337] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [pid 339] close(6) = 0 [pid 339] mkdir("./file4", 0777) = 0 [ 23.853643][ T337] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 23.880648][ T337] F2FS-fs (loop4): fault_injection options not supported [ 23.889009][ T339] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [pid 339] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 341] <... write resumed>) = 20699119 [pid 341] munmap(0x7f753e237000, 138412032) = 0 [pid 341] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 341] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 341] close(5) = 0 [pid 341] close(6 [pid 344] <... write resumed>) = 20699119 [ 23.900095][ T337] F2FS-fs (loop4): fault_type options not supported [ 23.906556][ T339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 23.920764][ T337] F2FS-fs (loop4): invalid crc value [ 23.927868][ T339] F2FS-fs (loop2): fault_injection options not supported [ 23.935104][ T339] F2FS-fs (loop2): fault_type options not supported [ 23.942583][ T341] loop3: detected capacity change from 0 to 40427 [pid 344] munmap(0x7f753e237000, 138412032) = 0 [pid 344] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 344] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 344] close(5) = 0 [pid 344] close(6 [pid 345] <... write resumed>) = 20699119 [pid 345] munmap(0x7f753e237000, 138412032 [pid 341] <... close resumed>) = 0 [pid 341] mkdir("./file4", 0777) = 0 [pid 341] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 345] <... munmap resumed>) = 0 [pid 345] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 345] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 345] close(5) = 0 [pid 345] close(6 [pid 344] <... close resumed>) = 0 [pid 344] mkdir("./file4", 0777) = 0 [ 23.951305][ T339] F2FS-fs (loop2): invalid crc value [ 23.956235][ T344] loop1: detected capacity change from 0 to 40427 [ 23.964406][ T337] F2FS-fs (loop4): Found nat_bits in checkpoint [ 23.975602][ T339] F2FS-fs (loop2): Found nat_bits in checkpoint [ 23.985431][ T345] loop0: detected capacity change from 0 to 40427 [ 24.001503][ T344] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 24.010811][ T344] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 24.019105][ T344] F2FS-fs (loop1): fault_injection options not supported [ 24.029832][ T337] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 24.036741][ T341] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 24.038574][ T339] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 344] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 345] <... close resumed>) = 0 [pid 345] mkdir("./file4", 0777 [pid 339] <... mount resumed>) = 0 [pid 339] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 339] chdir("./file4") = 0 [pid 339] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 339] ioctl(6, LOOP_CLR_FD) = 0 [pid 339] close(6) = 0 [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 339] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] <... mkdir resumed>) = 0 [pid 338] <... futex resumed>) = 0 [pid 337] <... mount resumed>) = 0 [pid 345] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 338] <... futex resumed>) = 1 [pid 337] <... openat resumed>) = 5 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] chdir("./file4") = 0 [pid 337] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 337] ioctl(6, LOOP_CLR_FD) = 0 [pid 337] close(6) = 0 [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 339] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 0 [pid 339] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] <... open resumed>) = 6 [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] fspick(AT_FDCWD, ".", 0) = 7 [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 1 [pid 337] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 1 [pid 337] fspick(AT_FDCWD, ".", 0) = 7 [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 24.046534][ T337] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.051220][ T339] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 24.058045][ T341] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 24.068044][ T344] F2FS-fs (loop1): fault_type options not supported [ 24.080469][ T341] F2FS-fs (loop3): fault_injection options not supported [ 24.084097][ T344] F2FS-fs (loop1): invalid crc value [ 24.087519][ T341] F2FS-fs (loop3): fault_type options not supported [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 1 [pid 337] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 1 [pid 337] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 1 [pid 337] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 1 [pid 337] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 1 [pid 337] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 337] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=336}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 1 [pid 337] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 337] <... futex resumed>) = 1 [pid 337] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 337] <... futex resumed>) = 1 [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 337] <... futex resumed>) = 1 [pid 337] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 337] <... futex resumed>) = 1 [pid 337] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 337] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] exit_group(0) = ? [pid 337] <... futex resumed>) = ? [pid 337] +++ exited with 0 +++ [pid 336] +++ exited with 0 +++ [pid 339] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=5, si_stime=19} --- [pid 338] <... futex resumed>) = 0 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./1/binderfs") = 0 [ 24.095528][ T339] F2FS-fs (loop2): switch discard_unit option is not allowed [ 24.103959][ T337] F2FS-fs (loop4): switch discard_unit option is not allowed [ 24.110213][ T345] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 24.122907][ T341] F2FS-fs (loop3): invalid crc value [ 24.138407][ T345] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 24.141204][ T344] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 339] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 339] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=338}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 339] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 339] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 339] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... futex resumed>) = 0 [pid 339] <... futex resumed>) = 0 [pid 338] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 339] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] exit_group(0) = ? [pid 339] <... futex resumed>) = ? [pid 339] +++ exited with 0 +++ [pid 338] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=2, si_stime=24} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./1/binderfs") = 0 [ 24.161478][ T345] F2FS-fs (loop0): fault_injection options not supported [ 24.170753][ T345] F2FS-fs (loop0): fault_type options not supported [ 24.178988][ T341] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.185170][ T345] F2FS-fs (loop0): invalid crc value [pid 297] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 344] <... mount resumed>) = 0 [pid 344] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 344] chdir("./file4") = 0 [pid 344] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 344] ioctl(6, LOOP_CLR_FD) = 0 [pid 344] close(6) = 0 [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 344] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 342] <... futex resumed>) = 0 [pid 344] <... open resumed>) = 6 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 1 [pid 344] fspick(AT_FDCWD, ".", 0) = 7 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 342] <... futex resumed>) = 0 [ 24.220366][ T344] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 24.233488][ T345] F2FS-fs (loop0): Found nat_bits in checkpoint [ 24.239717][ T344] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 344] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... open resumed>) = 8 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 344] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] sendfile(6, 6, NULL, 281483568746501 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 342] <... futex resumed>) = 0 [pid 344] recvfrom(3, [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=342}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 344] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 342] <... futex resumed>) = 0 [pid 344] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 344] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 344] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 342] <... futex resumed>) = 0 [pid 344] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] <... futex resumed>) = 0 [pid 342] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 342] <... futex resumed>) = 0 [pid 344] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 342] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 344] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] <... futex resumed>) = 0 [pid 342] exit_group(0) = ? [pid 344] +++ exited with 0 +++ [pid 342] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=6, si_stime=21} --- [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 296] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./1/binderfs") = 0 [ 24.279974][ T344] F2FS-fs (loop1): switch discard_unit option is not allowed [ 24.309395][ T345] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 24.316448][ T341] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [pid 296] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 341] <... mount resumed>) = 0 [pid 345] <... mount resumed>) = 0 [pid 341] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 345] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 341] <... openat resumed>) = 5 [pid 345] <... openat resumed>) = 5 [pid 341] chdir("./file4" [pid 345] chdir("./file4" [pid 341] <... chdir resumed>) = 0 [pid 345] <... chdir resumed>) = 0 [pid 341] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 345] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 341] <... openat resumed>) = 6 [pid 345] <... openat resumed>) = 6 [pid 341] ioctl(6, LOOP_CLR_FD [pid 345] ioctl(6, LOOP_CLR_FD [pid 341] <... ioctl resumed>) = 0 [pid 345] <... ioctl resumed>) = 0 [pid 341] close(6 [pid 345] close(6 [pid 341] <... close resumed>) = 0 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... close resumed>) = 0 [pid 341] <... futex resumed>) = 1 [pid 340] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 345] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... open resumed>) = 6 [pid 345] <... open resumed>) = 6 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 1 [pid 340] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 341] fspick(AT_FDCWD, ".", 0 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] fspick(AT_FDCWD, ".", 0 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... fspick resumed>) = 7 [pid 341] <... fspick resumed>) = 7 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 1 [pid 340] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 EINVAL (Invalid argument) [pid 345] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 1 [pid 340] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 345] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 343] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... open resumed>) = 8 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] <... futex resumed>) = 0 [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... open resumed>) = 8 [pid 345] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 343] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 340] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 341] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = 0 [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] sendfile(6, 6, NULL, 281483568746501 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] sendfile(6, 6, NULL, 281483568746501 [pid 340] <... futex resumed>) = 0 [pid 345] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = 1 [pid 340] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 345] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... sendto resumed>) = 36 [pid 341] <... sendto resumed>) = 36 [pid 345] recvfrom(3, [pid 341] recvfrom(3, [pid 345] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=343}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 341] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=340}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 1 [pid 340] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 345] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 341] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = 1 [pid 340] <... futex resumed>) = 0 [pid 345] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 341] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 345] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 345] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 345] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 341] <... futex resumed>) = 0 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 341] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 345] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 343] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 341] <... futex resumed>) = 1 [pid 345] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = 1 [pid 343] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] exit_group(0 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = ? [pid 343] <... exit_group resumed>) = ? [pid 341] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 340] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 345] +++ exited with 0 +++ [pid 343] +++ exited with 0 +++ [pid 341] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=343, si_uid=0, si_status=0, si_utime=5, si_stime=18} --- [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 341] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 341] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] exit_group(0 [pid 341] <... futex resumed>) = ? [pid 340] <... exit_group resumed>) = ? [pid 295] <... restart_syscall resumed>) = 0 [pid 341] +++ exited with 0 +++ [pid 295] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] +++ exited with 0 +++ [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=3, si_stime=28} --- [pid 295] <... openat resumed>) = 3 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./1/binderfs") = 0 [ 24.316832][ T345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 24.327541][ T341] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 24.357288][ T345] F2FS-fs (loop0): switch discard_unit option is not allowed [ 24.364887][ T341] F2FS-fs (loop3): switch discard_unit option is not allowed [pid 295] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... restart_syscall resumed>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(AT_FDCWD, "./1/file4", [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] openat(AT_FDCWD, "./1/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] unlink("./1/binderfs") = 0 [pid 298] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... openat resumed>) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./1/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./1") = 0 [pid 297] mkdir("./2", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 368 ./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 368] chdir("./2") = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 368] write(1, "executing program\n", 18) = 18 [pid 368] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 368] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[369]}, 88) = 369 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x7f75466579a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] bpf(BPF_MAP_CREATE, NULL, 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... socket resumed>) = 3 [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... bpf resumed>) = 4 [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 369] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... sendmsg resumed>) = 20 [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 369] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 368] <... futex resumed>) = 0 [pid 369] memfd_create("syzkaller", 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 369] <... memfd_create resumed>) = 5 [pid 369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 299] <... umount2 resumed>) = 0 [pid 296] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./1/file4", [pid 299] newfstatat(AT_FDCWD, "./1/file4", [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./1/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] openat(AT_FDCWD, "./1/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] <... openat resumed>) = 4 [pid 296] <... openat resumed>) = 4 [pid 296] newfstatat(4, "", [pid 299] newfstatat(4, "", [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./1/file4") = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, [pid 299] getdents64(3, [pid 296] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(4 [pid 299] close(3 [pid 296] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 296] rmdir("./1/file4" [pid 299] rmdir("./1") = 0 [pid 296] <... rmdir resumed>) = 0 [pid 299] mkdir("./2", 0777 [pid 296] getdents64(3, [pid 299] <... mkdir resumed>) = 0 [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./1" [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 296] <... rmdir resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 296] mkdir("./2", 0777 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] <... mkdir resumed>) = 0 [pid 299] close(3 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 299] <... close resumed>) = 0 [pid 296] ioctl(3, LOOP_CLR_FD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 370 ./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 370] chdir("./2") = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 296] <... clone resumed>, child_tidptr=0x55558ce1a690) = 371 [pid 370] <... prctl resumed>) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 370] write(1, "executing program\n", 18executing program ) = 18 [pid 370] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 371] chdir("./2") = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setpgid(0, 0) = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 370] <... mmap resumed>) = 0x7f7546637000 [pid 370] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 371] <... openat resumed>) = 3 [pid 370] <... mprotect resumed>) = 0 [pid 371] write(3, "1000", 4) = 4 [pid 371] close(3) = 0 [pid 371] symlink("/dev/binderfs", "./binderfs" [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [pid 371] <... symlink resumed>) = 0 [pid 370] <... rt_sigprocmask resumed>[], 8) = 0 executing program [pid 371] write(1, "executing program\n", 18) = 18 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 371] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 371] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 370] <... clone3 resumed> => {parent_tid=[372]}, 88) = 372 [pid 371] <... mprotect resumed>) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], [pid 371] rt_sigprocmask(SIG_BLOCK, ~[], [pid 370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 371] <... rt_sigprocmask resumed>[], 8) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... clone3 resumed> => {parent_tid=[373]}, 88) = 373 [pid 371] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 372 attached NULL, 8) = 0 [pid 372] set_robust_list(0x7f75466579a0, 24 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... set_robust_list resumed>) = 0 [pid 371] <... futex resumed>) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [], [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 372] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 372] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 372] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 372] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 372] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 372] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 372] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 372] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x7f75466579a0, 24 [pid 372] <... bpf resumed>) = 4 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 373] <... set_robust_list resumed>) = 0 [pid 372] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 373] rt_sigprocmask(SIG_SETMASK, [], [pid 372] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 372] <... futex resumed>) = 1 [pid 372] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 373] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 372] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = 1 [pid 372] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... sendmsg resumed>) = 20 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 1 [pid 371] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = 0 [pid 373] bpf(BPF_MAP_CREATE, NULL, 0 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 1 [pid 373] <... futex resumed>) = 1 [pid 372] memfd_create("syzkaller", 0 [pid 371] <... futex resumed>) = 0 [pid 373] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 372] <... memfd_create resumed>) = 5 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 371] <... futex resumed>) = 0 [pid 373] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... mmap resumed>) = 0x7f753e237000 [pid 373] <... futex resumed>) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 371] <... futex resumed>) = 0 [pid 373] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] <... futex resumed>) = 0 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... socket resumed>) = 3 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... bpf resumed>) = 4 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 373] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... sendmsg resumed>) = 20 [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] memfd_create("syzkaller", 0 [pid 371] <... futex resumed>) = 0 [pid 373] <... memfd_create resumed>) = 5 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 369] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 295] <... umount2 resumed>) = 0 [pid 295] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./1/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./1/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./1/file4") = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./1") = 0 [pid 295] mkdir("./2", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 374 ./strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 374] chdir("./2") = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 374] write(1, "executing program\n", 18) = 18 [pid 374] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 374] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[375]}, 88) = 375 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x7f75466579a0, 24) = 0 [pid 375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 375] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 375] <... futex resumed>) = 1 [pid 375] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] memfd_create("syzkaller", 0) = 5 [pid 375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./1/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./1/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./1/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./1/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./1") = 0 [pid 298] mkdir("./2", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 376] chdir("./2" [pid 298] <... clone resumed>, child_tidptr=0x55558ce1a690) = 376 [pid 376] <... chdir resumed>) = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 376] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 376] write(1, "executing program\n", 18) = 18 [pid 376] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 376] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[377]}, 88) = 377 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x7f75466579a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 377] <... futex resumed>) = 1 [pid 377] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] memfd_create("syzkaller", 0) = 5 [pid 377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 372] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 373] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 369] <... write resumed>) = 20699119 [pid 369] munmap(0x7f753e237000, 138412032) = 0 [pid 369] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 369] ioctl(6, LOOP_SET_FD, 5 [pid 375] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 369] <... ioctl resumed>) = 0 [pid 369] close(5) = 0 [pid 369] close(6) = 0 [pid 369] mkdir("./file4", 0777) = 0 [ 24.860878][ T369] loop2: detected capacity change from 0 to 40427 [pid 369] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 372] <... write resumed>) = 20699119 [pid 372] munmap(0x7f753e237000, 138412032) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 372] ioctl(6, LOOP_SET_FD, 5 [pid 377] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 372] <... ioctl resumed>) = 0 [pid 372] close(5) = 0 [ 24.927691][ T372] loop4: detected capacity change from 0 to 40427 [ 24.940667][ T369] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [pid 372] close(6 [pid 373] <... write resumed>) = 20699119 [pid 373] munmap(0x7f753e237000, 138412032) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 373] ioctl(6, LOOP_SET_FD, 5 [pid 372] <... close resumed>) = 0 [pid 372] mkdir("./file4", 0777 [pid 373] <... ioctl resumed>) = 0 [pid 373] close(5) = 0 [pid 373] close(6 [pid 372] <... mkdir resumed>) = 0 [pid 372] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 375] <... write resumed>) = 20699119 [ 24.968417][ T369] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 24.971410][ T373] loop1: detected capacity change from 0 to 40427 [ 24.983212][ T369] F2FS-fs (loop2): fault_injection options not supported [ 25.000094][ T369] F2FS-fs (loop2): fault_type options not supported [pid 375] munmap(0x7f753e237000, 138412032) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 375] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 375] close(5) = 0 [pid 375] close(6 [pid 373] <... close resumed>) = 0 [pid 373] mkdir("./file4", 0777) = 0 [ 25.017748][ T369] F2FS-fs (loop2): invalid crc value [ 25.019281][ T375] loop0: detected capacity change from 0 to 40427 [ 25.031331][ T373] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 25.038187][ T373] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 25.047365][ T372] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 25.054560][ T369] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 373] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 375] <... close resumed>) = 0 [pid 375] mkdir("./file4", 0777) = 0 [pid 375] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 377] <... write resumed>) = 20699119 [pid 377] munmap(0x7f753e237000, 138412032) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 377] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 377] close(5) = 0 [ 25.067184][ T372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 25.085976][ T373] F2FS-fs (loop1): fault_injection options not supported [ 25.088122][ T377] loop3: detected capacity change from 0 to 40427 [ 25.093351][ T372] F2FS-fs (loop4): fault_injection options not supported [ 25.106495][ T373] F2FS-fs (loop1): fault_type options not supported [pid 377] close(6) = 0 [pid 377] mkdir("./file4", 0777) = 0 [ 25.114145][ T372] F2FS-fs (loop4): fault_type options not supported [ 25.121164][ T373] F2FS-fs (loop1): invalid crc value [ 25.121285][ T375] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 25.127712][ T372] F2FS-fs (loop4): invalid crc value [ 25.139891][ T377] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 25.145815][ T375] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 25.157315][ T375] F2FS-fs (loop0): fault_injection options not supported [pid 377] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 369] <... mount resumed>) = 0 [pid 369] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 369] chdir("./file4") = 0 [pid 369] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 369] ioctl(6, LOOP_CLR_FD) = 0 [pid 369] close(6) = 0 [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] fspick(AT_FDCWD, ".", 0) = 7 [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [ 25.158205][ T373] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.166210][ T369] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 25.173732][ T377] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 25.178032][ T375] F2FS-fs (loop0): fault_type options not supported [ 25.192115][ T369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.206054][ T377] F2FS-fs (loop3): fault_injection options not supported [pid 369] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 EINVAL (Invalid argument) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 369] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=368}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 369] <... futex resumed>) = 1 [pid 369] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 369] <... futex resumed>) = 1 [pid 369] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 369] <... futex resumed>) = 1 [pid 369] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 369] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] exit_group(0) = ? [pid 369] <... futex resumed>) = ? [pid 369] +++ exited with 0 +++ [pid 368] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=6, si_stime=15} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./2/binderfs") = 0 [ 25.208892][ T369] F2FS-fs (loop2): switch discard_unit option is not allowed [ 25.220526][ T377] F2FS-fs (loop3): fault_type options not supported [ 25.221763][ T375] F2FS-fs (loop0): invalid crc value [ 25.233536][ T377] F2FS-fs (loop3): invalid crc value [ 25.250849][ T375] F2FS-fs (loop0): Found nat_bits in checkpoint [ 25.260548][ T372] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 297] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 375] <... mount resumed>) = 0 [pid 375] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 375] chdir("./file4") = 0 [pid 375] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 375] ioctl(6, LOOP_CLR_FD) = 0 [pid 375] close(6) = 0 [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 374] <... futex resumed>) = 1 [pid 375] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fspick(AT_FDCWD, ".", 0 [pid 374] <... futex resumed>) = 0 [pid 375] <... fspick resumed>) = 7 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 25.283813][ T377] F2FS-fs (loop3): Found nat_bits in checkpoint [ 25.293573][ T373] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 25.311188][ T375] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 25.318114][ T375] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 25.318192][ T373] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 375] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 375] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=374}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 375] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 375] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 375] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 375] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 375] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] exit_group(0) = ? [pid 375] <... futex resumed>) = ? [pid 375] +++ exited with 0 +++ [pid 374] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=374, si_uid=0, si_status=0, si_utime=5, si_stime=23} --- [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 373] <... mount resumed>) = 0 [pid 373] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 373] chdir("./file4") = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 373] ioctl(6, LOOP_CLR_FD) = 0 [pid 373] close(6) = 0 [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] fspick(AT_FDCWD, ".", 0) = 7 [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 295] <... restart_syscall resumed>) = 0 [pid 295] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 373] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 25.339740][ T375] F2FS-fs (loop0): switch discard_unit option is not allowed [pid 295] unlink("./2/binderfs") = 0 [pid 373] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 373] <... futex resumed>) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... open resumed>) = 8 [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] sendfile(6, 6, NULL, 281483568746501 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... sendto resumed>) = 36 [pid 373] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=371}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 373] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 373] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] <... futex resumed>) = 0 [pid 373] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 373] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... mount resumed>) = 0 [pid 371] <... futex resumed>) = 0 [pid 373] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 371] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 373] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 373] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [ 25.382139][ T373] F2FS-fs (loop1): switch discard_unit option is not allowed [ 25.409298][ T372] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 25.418078][ T372] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 373] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] exit_group(0 [pid 373] <... futex resumed>) = ? [pid 371] <... exit_group resumed>) = ? [pid 373] +++ exited with 0 +++ [pid 371] +++ exited with 0 +++ [pid 372] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=371, si_uid=0, si_status=0, si_utime=4, si_stime=22} --- [pid 372] chdir("./file4" [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 372] <... chdir resumed>) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 296] <... restart_syscall resumed>) = 0 [pid 372] <... openat resumed>) = 6 [pid 372] ioctl(6, LOOP_CLR_FD) = 0 [pid 372] close(6 [pid 296] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 372] <... close resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 296] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... openat resumed>) = 3 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 296] newfstatat(3, "", [pid 372] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 372] <... open resumed>) = 6 [pid 296] getdents64(3, [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 372] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 296] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 372] fspick(AT_FDCWD, ".", 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... fspick resumed>) = 7 [pid 296] newfstatat(AT_FDCWD, "./2/binderfs", [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... futex resumed>) = 1 [pid 370] <... futex resumed>) = 0 [pid 296] unlink("./2/binderfs" [pid 372] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 372] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 372] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... mount resumed>) = 0 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = 0 [pid 372] <... futex resumed>) = 1 [pid 370] <... futex resumed>) = 0 [pid 297] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 372] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... open resumed>) = 8 [pid 370] <... futex resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./2/file4", [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 372] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 372] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 370] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "./2/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... openat resumed>) = 4 [pid 372] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] newfstatat(4, "", [pid 372] sendfile(6, 6, NULL, 281483568746501 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 372] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 370] <... futex resumed>) = 0 [pid 297] getdents64(4, [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 372] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] getdents64(4, [pid 372] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 372] <... sendto resumed>) = 36 [pid 370] <... futex resumed>) = 0 [pid 297] close(4 [pid 372] recvfrom(3, [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=370}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 297] <... close resumed>) = 0 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] rmdir("./2/file4" [pid 372] <... futex resumed>) = 1 [pid 370] <... futex resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 372] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(3, [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 372] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(3 [pid 372] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 297] <... close resumed>) = 0 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] rmdir("./2" [pid 372] <... futex resumed>) = 1 [pid 370] <... futex resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 372] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] mkdir("./3", 0777 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 372] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 372] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 297] <... openat resumed>) = 3 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] ioctl(3, LOOP_CLR_FD [pid 372] <... futex resumed>) = 1 [pid 370] <... futex resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(3 [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 372] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 399 attached [pid 372] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 5 [pid 377] chdir("./file4" [pid 372] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 370] <... futex resumed>) = 0 [pid 297] <... clone resumed>, child_tidptr=0x55558ce1a690) = 399 [pid 377] <... chdir resumed>) = 0 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 377] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 372] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... openat resumed>) = 6 [pid 372] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(6, LOOP_CLR_FD [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = 0 [pid 372] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 370] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 377] close(6 [pid 372] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 377] <... close resumed>) = 0 [pid 372] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 1 [pid 370] <... futex resumed>) = 0 [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 372] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] exit_group(0 [pid 377] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = ? [pid 370] <... exit_group resumed>) = ? [pid 399] set_robust_list(0x55558ce1a6a0, 24 [pid 377] <... open resumed>) = 6 [pid 376] <... futex resumed>) = 0 [pid 372] +++ exited with 0 +++ [pid 370] +++ exited with 0 +++ [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=5, si_stime=24} --- [pid 377] <... futex resumed>) = 0 [pid 376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 377] fspick(AT_FDCWD, ".", 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fspick resumed>) = 7 [pid 376] <... futex resumed>) = 0 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 0 [pid 376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... restart_syscall resumed>) = 0 [ 25.431916][ T377] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 25.438809][ T377] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 25.461502][ T372] F2FS-fs (loop4): switch discard_unit option is not allowed [pid 399] <... set_robust_list resumed>) = 0 [pid 377] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] chdir("./3" [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", [pid 399] <... chdir resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 399] <... prctl resumed>) = 0 [pid 299] unlink("./2/binderfs" [pid 399] setpgid(0, 0 [pid 299] <... unlink resumed>) = 0 [pid 299] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 399] <... setpgid resumed>) = 0 [pid 377] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 399] <... openat resumed>) = 3 [pid 399] write(3, "1000", 4) = 4 [pid 399] close(3) = 0 [pid 377] <... sendto resumed>) = 36 [pid 399] symlink("/dev/binderfs", "./binderfs" [pid 377] recvfrom(3, [pid 399] <... symlink resumed>) = 0 [pid 377] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=376}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 executing program [pid 399] write(1, "executing program\n", 18) = 18 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 376] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 377] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 399] <... rt_sigaction resumed>NULL, 8) = 0 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 377] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... mmap resumed>) = 0x7f7546637000 [pid 399] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 399] <... mprotect resumed>) = 0 [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] rt_sigprocmask(SIG_BLOCK, ~[], [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 399] <... rt_sigprocmask resumed>[], 8) = 0 [pid 377] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 377] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... clone3 resumed> => {parent_tid=[400]}, 88) = 400 [pid 377] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] rt_sigprocmask(SIG_SETMASK, [], [pid 376] <... futex resumed>) = 0 [pid 399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 0 [pid 376] <... futex resumed>) = 1 [pid 377] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 376] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 377] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] exit_group(0) = ? [pid 377] <... futex resumed>) = ? [pid 377] +++ exited with 0 +++ [pid 376] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=4, si_stime=20} --- [ 25.507178][ T377] F2FS-fs (loop3): switch discard_unit option is not allowed [pid 298] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 400 attached ) = 0 [pid 400] set_robust_list(0x7f75466579a0, 24 [pid 298] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", [pid 400] <... set_robust_list resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, [pid 400] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./2/binderfs", [pid 400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./2/binderfs" [pid 400] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 298] <... unlink resumed>) = 0 [pid 298] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 400] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 295] <... umount2 resumed>) = 0 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] bpf(BPF_MAP_CREATE, NULL, 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 400] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 400] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 400] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... socket resumed>) = 3 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 400] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... bpf resumed>) = 4 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 400] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 400] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] newfstatat(AT_FDCWD, "./2/file4", [pid 400] <... futex resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 400] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 295] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 400] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 400] <... futex resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] openat(AT_FDCWD, "./2/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 400] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... openat resumed>) = 4 [pid 400] <... sendmsg resumed>) = 20 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] newfstatat(4, "", [pid 400] <... futex resumed>) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] <... futex resumed>) = 0 [pid 400] memfd_create("syzkaller", 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 295] getdents64(4, [pid 400] <... memfd_create resumed>) = 5 [pid 400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 295] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 400] <... mmap resumed>) = 0x7f753e237000 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./2/file4") = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./2") = 0 [pid 295] mkdir("./3", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 401 ./strace-static-x86_64: Process 401 attached [pid 401] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 401] chdir("./3") = 0 [pid 401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 401] setpgid(0, 0) = 0 [pid 401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 401] write(3, "1000", 4) = 4 [pid 401] close(3) = 0 [pid 401] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 401] write(1, "executing program\n", 18) = 18 [pid 401] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 401] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[402]}, 88) = 402 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x7f75466579a0, 24) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] bpf(BPF_MAP_CREATE, NULL, 0 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... socket resumed>) = 3 [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... bpf resumed>) = 4 [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 401] <... futex resumed>) = 0 [pid 402] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] <... futex resumed>) = 0 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 401] <... futex resumed>) = 0 [pid 402] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] <... futex resumed>) = 0 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 401] <... futex resumed>) = 0 [pid 402] <... sendmsg resumed>) = 20 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] <... futex resumed>) = 0 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] memfd_create("syzkaller", 0 [pid 401] <... futex resumed>) = 0 [pid 402] <... memfd_create resumed>) = 5 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./2/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./2/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./2/file4") = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./2") = 0 [pid 299] mkdir("./3", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 403 [pid 296] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 403 attached [pid 403] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 403] chdir("./3") = 0 [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 403] setpgid(0, 0) = 0 [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 403] write(3, "1000", 4) = 4 [pid 403] close(3) = 0 [pid 403] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 403] write(1, "executing program\n", 18) = 18 [pid 403] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 403] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[404]}, 88) = 404 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./2/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./2/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./2/file4"./strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x7f75466579a0, 24) = 0 [pid 296] <... rmdir resumed>) = 0 [pid 296] getdents64(3, [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] bpf(BPF_MAP_CREATE, NULL, 0 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... socket resumed>) = 3 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... bpf resumed>) = 4 [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 404] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] close(3 [pid 404] <... sendmsg resumed>) = 20 [pid 296] <... close resumed>) = 0 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 296] rmdir("./2" [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] memfd_create("syzkaller", 0 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 296] <... rmdir resumed>) = 0 [pid 404] <... memfd_create resumed>) = 5 [pid 404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 296] mkdir("./3", 0777 [pid 404] <... mmap resumed>) = 0x7f753e237000 [pid 296] <... mkdir resumed>) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 405 ./strace-static-x86_64: Process 405 attached [pid 405] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 405] chdir("./3") = 0 [pid 405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 405] setpgid(0, 0) = 0 [pid 405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 405] write(3, "1000", 4) = 4 [pid 405] close(3) = 0 [pid 405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 405] write(1, "executing program\n", 18executing program ) = 18 [pid 405] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 405] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[406]}, 88) = 406 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 406 attached [pid 406] set_robust_list(0x7f75466579a0, 24) = 0 [pid 298] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./2/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./2/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./2/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./2/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./2") = 0 [pid 298] mkdir("./3", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 405] <... futex resumed>) = 1 [pid 406] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 405] <... futex resumed>) = 1 [pid 406] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 405] <... futex resumed>) = 1 [pid 406] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 405] <... futex resumed>) = 1 [pid 406] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 405] <... futex resumed>) = 0 [pid 406] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 405] <... futex resumed>) = 0 [pid 406] <... socket resumed>) = 3 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 405] <... futex resumed>) = 0 [pid 406] <... bpf resumed>) = 4 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 405] <... futex resumed>) = 0 [pid 406] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 405] <... futex resumed>) = 0 [pid 406] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... sendmsg resumed>) = 20 [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 405] <... futex resumed>) = 0 [pid 406] memfd_create("syzkaller", 0 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 406] <... memfd_create resumed>) = 5 [pid 406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 407 ./strace-static-x86_64: Process 407 attached [pid 407] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 407] chdir("./3") = 0 [pid 407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 407] setpgid(0, 0 [pid 400] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 407] <... setpgid resumed>) = 0 [pid 407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 407] write(3, "1000", 4) = 4 [pid 407] close(3) = 0 [pid 407] symlink("/dev/binderfs", "./binderfs") = 0 [pid 407] write(1, "executing program\n", 18executing program ) = 18 [pid 407] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 407] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 407] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[408]}, 88) = 408 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 408 attached [pid 408] set_robust_list(0x7f75466579a0, 24) = 0 [pid 408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 408] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = 1 [pid 408] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = 1 [pid 408] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = 1 [pid 408] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = 1 [pid 408] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... socket resumed>) = 3 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... bpf resumed>) = 4 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 408] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... sendmsg resumed>) = 20 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 408] memfd_create("syzkaller", 0) = 5 [pid 408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 400] <... write resumed>) = 20699119 [pid 400] munmap(0x7f753e237000, 138412032) = 0 [pid 400] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 400] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 400] close(5) = 0 [pid 400] close(6 [pid 404] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 25.935957][ T400] loop2: detected capacity change from 0 to 40427 [pid 406] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 400] <... close resumed>) = 0 [pid 400] mkdir("./file4", 0777) = 0 [pid 400] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 408] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 402] <... write resumed>) = 20699119 [pid 402] munmap(0x7f753e237000, 138412032) = 0 [pid 402] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [ 26.011820][ T400] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 26.026687][ T400] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 26.046216][ T400] F2FS-fs (loop2): fault_injection options not supported [ 26.054270][ T402] loop0: detected capacity change from 0 to 40427 [pid 402] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 402] close(5) = 0 [pid 402] close(6) = 0 [pid 402] mkdir("./file4", 0777) = 0 [pid 402] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 404] <... write resumed>) = 20699119 [pid 404] munmap(0x7f753e237000, 138412032) = 0 [pid 404] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [ 26.056474][ T400] F2FS-fs (loop2): fault_type options not supported [ 26.080276][ T400] F2FS-fs (loop2): invalid crc value [ 26.100248][ T400] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 404] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 404] close(5) = 0 [pid 404] close(6 [pid 406] <... write resumed>) = 20699119 [pid 406] munmap(0x7f753e237000, 138412032) = 0 [pid 406] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [ 26.121198][ T404] loop4: detected capacity change from 0 to 40427 [ 26.154032][ T402] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 26.163777][ T406] loop1: detected capacity change from 0 to 40427 [pid 406] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 406] close(5) = 0 [pid 406] close(6 [pid 408] <... write resumed>) = 20699119 [pid 408] munmap(0x7f753e237000, 138412032) = 0 [pid 404] <... close resumed>) = 0 [pid 404] mkdir("./file4", 0777) = 0 [pid 404] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 408] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 408] ioctl(6, LOOP_SET_FD, 5 [pid 400] <... mount resumed>) = 0 [pid 408] <... ioctl resumed>) = 0 [pid 408] close(5) = 0 [pid 408] close(6 [pid 400] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 400] chdir("./file4") = 0 [pid 400] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 400] ioctl(6, LOOP_CLR_FD) = 0 [pid 400] close(6) = 0 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 1 [pid 400] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... open resumed>) = 6 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 400] fspick(AT_FDCWD, ".", 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... fspick resumed>) = 7 [pid 399] <... futex resumed>) = 0 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [ 26.170067][ T402] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 26.181125][ T400] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 26.181604][ T402] F2FS-fs (loop0): fault_injection options not supported [ 26.188263][ T400] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 26.197134][ T408] loop3: detected capacity change from 0 to 40427 [ 26.202991][ T402] F2FS-fs (loop0): fault_type options not supported [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... close resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] sendfile(6, 6, NULL, 281483568746501 [pid 406] mkdir("./file4", 0777 [pid 400] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... mkdir resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 406] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 400] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=399}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 400] <... futex resumed>) = 1 [pid 400] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 400] <... futex resumed>) = 1 [pid 400] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 400] <... futex resumed>) = 1 [pid 400] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 400] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] exit_group(0) = ? [pid 400] <... futex resumed>) = ? [pid 400] +++ exited with 0 +++ [pid 399] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=399, si_uid=0, si_status=0, si_utime=4, si_stime=19} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 408] <... close resumed>) = 0 [pid 408] mkdir("./file4", 0777) = 0 [pid 297] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 408] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./3/binderfs") = 0 [ 26.214113][ T400] F2FS-fs (loop2): switch discard_unit option is not allowed [ 26.216209][ T402] F2FS-fs (loop0): invalid crc value [ 26.228766][ T406] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 26.235621][ T406] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 26.240444][ T402] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.243964][ T406] F2FS-fs (loop1): fault_injection options not supported [ 26.258190][ T404] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 26.258253][ T408] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 26.274986][ T404] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 26.284024][ T408] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 26.300082][ T406] F2FS-fs (loop1): fault_type options not supported [ 26.316294][ T408] F2FS-fs (loop3): fault_injection options not supported [ 26.318267][ T404] F2FS-fs (loop4): fault_injection options not supported [ 26.331517][ T406] F2FS-fs (loop1): invalid crc value [ 26.336750][ T404] F2FS-fs (loop4): fault_type options not supported [ 26.343506][ T408] F2FS-fs (loop3): fault_type options not supported [ 26.351253][ T404] F2FS-fs (loop4): invalid crc value [ 26.358172][ T408] F2FS-fs (loop3): invalid crc value [ 26.365331][ T402] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [pid 297] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 402] <... mount resumed>) = 0 [pid 402] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 402] chdir("./file4") = 0 [pid 402] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 402] ioctl(6, LOOP_CLR_FD) = 0 [pid 402] close(6) = 0 [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... open resumed>) = 6 [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] fspick(AT_FDCWD, ".", 0 [pid 401] <... futex resumed>) = 0 [pid 402] <... fspick resumed>) = 7 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] <... futex resumed>) = 0 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 401] <... futex resumed>) = 0 [ 26.365906][ T404] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.372469][ T402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 26.378425][ T406] F2FS-fs (loop1): Found nat_bits in checkpoint [ 26.392655][ T408] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 401] <... futex resumed>) = 0 [pid 402] <... open resumed>) = 8 [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 401] <... futex resumed>) = 1 [pid 402] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] sendfile(6, 6, NULL, 281483568746501 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=401}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] <... futex resumed>) = 0 [pid 402] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 402] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 401] <... futex resumed>) = 1 [pid 402] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 402] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 401] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 401] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 402] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 402] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] exit_group(0 [pid 402] <... futex resumed>) = ? [pid 401] <... exit_group resumed>) = ? [pid 402] +++ exited with 0 +++ [pid 401] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=401, si_uid=0, si_status=0, si_utime=4, si_stime=21} --- [pid 295] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 404] <... mount resumed>) = 0 [pid 295] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 404] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 404] chdir("./file4") = 0 [ 26.429566][ T402] F2FS-fs (loop0): switch discard_unit option is not allowed [ 26.449661][ T404] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 26.471285][ T404] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 295] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 404] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 404] ioctl(6, LOOP_CLR_FD) = 0 [pid 404] close(6) = 0 [pid 295] <... openat resumed>) = 3 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 295] newfstatat(3, "", [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... open resumed>) = 6 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] fspick(AT_FDCWD, ".", 0 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 404] <... fspick resumed>) = 7 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] getdents64(3, [pid 404] <... futex resumed>) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] <... futex resumed>) = 0 [pid 404] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./3/binderfs", [pid 404] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... futex resumed>) = 1 [pid 404] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... futex resumed>) = 1 [pid 404] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... futex resumed>) = 1 [pid 404] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 404] <... futex resumed>) = 1 [pid 404] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 404] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=403}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... mount resumed>) = 0 [pid 404] <... futex resumed>) = 1 [pid 403] <... futex resumed>) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 408] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 404] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] unlink("./3/binderfs" [pid 408] <... openat resumed>) = 5 [pid 404] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 403] <... futex resumed>) = 0 [pid 408] chdir("./file4" [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... unlink resumed>) = 0 [pid 408] <... chdir resumed>) = 0 [pid 404] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 408] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 404] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... openat resumed>) = 6 [pid 404] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 404] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = 1 [pid 404] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 404] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 404] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 403] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 403] <... futex resumed>) = 0 [pid 404] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 404] <... futex resumed>) = 0 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 403] exit_group(0 [pid 404] <... futex resumed>) = ? [pid 403] <... exit_group resumed>) = ? [pid 404] +++ exited with 0 +++ [pid 403] +++ exited with 0 +++ [pid 408] ioctl(6, LOOP_CLR_FD) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=403, si_uid=0, si_status=0, si_utime=5, si_stime=19} --- [pid 408] close(6 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 408] <... close resumed>) = 0 [ 26.486516][ T408] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 26.504239][ T404] F2FS-fs (loop4): switch discard_unit option is not allowed [ 26.512716][ T408] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.521905][ T406] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... restart_syscall resumed>) = 0 [pid 408] <... futex resumed>) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 408] <... open resumed>) = 6 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 408] <... futex resumed>) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 299] newfstatat(3, "", [pid 408] fspick(AT_FDCWD, ".", 0 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 408] <... fspick resumed>) = 7 [pid 299] getdents64(3, [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] <... mount resumed>) = 0 [pid 406] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 406] chdir("./file4") = 0 [pid 406] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 406] ioctl(6, LOOP_CLR_FD) = 0 [pid 406] close(6) = 0 [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./3/binderfs", [pid 405] <... futex resumed>) = 1 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] unlink("./3/binderfs" [pid 406] <... futex resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 299] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 406] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = 0 [pid 406] fspick(AT_FDCWD, ".", 0) = 7 [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 406] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = 1 [pid 407] <... futex resumed>) = 0 [pid 405] <... futex resumed>) = 0 [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 407] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... open resumed>) = 8 [pid 406] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = 0 [pid 408] <... futex resumed>) = 1 [pid 407] <... futex resumed>) = 0 [pid 297] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] <... futex resumed>) = 1 [pid 405] <... futex resumed>) = 0 [pid 408] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(AT_FDCWD, "./3/file4", [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 0 [pid 408] <... futex resumed>) = 1 [pid 407] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] sendfile(6, 6, NULL, 281483568746501 [pid 407] <... futex resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] sendfile(6, 6, NULL, 281483568746501 [pid 408] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 297] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "./3/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 408] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... sendto resumed>) = 36 [pid 297] <... openat resumed>) = 4 [pid 408] recvfrom(3, [pid 297] newfstatat(4, "", [pid 408] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=407}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(4, [pid 408] <... futex resumed>) = 1 [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(4, [pid 408] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = 1 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 408] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(4 [pid 408] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 297] <... close resumed>) = 0 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] rmdir("./3/file4" [pid 408] <... futex resumed>) = 1 [pid 407] <... futex resumed>) = 0 [pid 408] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 407] <... futex resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 297] getdents64(3, [pid 408] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 297] close(3 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 408] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] rmdir("./3" [pid 408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 407] <... futex resumed>) = 0 [pid 408] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 408] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 297] <... rmdir resumed>) = 0 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] mkdir("./4", 0777 [pid 408] <... futex resumed>) = 1 [pid 407] <... futex resumed>) = 0 [pid 406] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 408] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 407] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 408] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 407] <... futex resumed>) = 0 [pid 408] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 408] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] exit_group(0 [pid 297] <... mkdir resumed>) = 0 [pid 408] <... futex resumed>) = ? [pid 407] <... exit_group resumed>) = ? [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] +++ exited with 0 +++ [pid 407] +++ exited with 0 +++ [pid 405] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 405] <... futex resumed>) = 1 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=407, si_uid=0, si_status=0, si_utime=6, si_stime=20} --- [pid 297] <... openat resumed>) = 3 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 297] ioctl(3, LOOP_CLR_FD [pid 298] <... restart_syscall resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] close(3 [pid 406] <... futex resumed>) = 0 [pid 406] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 406] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=405}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] <... futex resumed>) = 0 [pid 298] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 405] <... futex resumed>) = 1 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 406] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 298] newfstatat(3, "", [pid 297] <... clone resumed>, child_tidptr=0x55558ce1a690) = 430 [pid 406] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(3, [pid 406] <... futex resumed>) = 0 [pid 405] <... futex resumed>) = 1 [pid 298] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 406] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 298] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 406] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(AT_FDCWD, "./3/binderfs", [pid 406] <... futex resumed>) = 1 [pid 405] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] unlink("./3/binderfs" [pid 405] <... futex resumed>) = 0 [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... unlink resumed>) = 0 [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 298] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 405] <... futex resumed>) = 0 [pid 406] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 405] <... futex resumed>) = 0 [pid 406] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 405] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 406] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] exit_group(0 [pid 406] <... futex resumed>) = ? [pid 405] <... exit_group resumed>) = ? [pid 406] +++ exited with 0 +++ [pid 405] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=405, si_uid=0, si_status=0, si_utime=5, si_stime=22} --- [ 26.537095][ T406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.546733][ T408] F2FS-fs (loop3): switch discard_unit option is not allowed [ 26.561473][ T406] F2FS-fs (loop1): switch discard_unit option is not allowed [pid 296] restart_syscall(<... resuming interrupted clone ...>executing program ./strace-static-x86_64: Process 430 attached [pid 430] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 296] <... restart_syscall resumed>) = 0 [pid 430] chdir("./4") = 0 [pid 430] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 296] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 430] <... prctl resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 430] setpgid(0, 0 [pid 296] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 430] <... setpgid resumed>) = 0 [pid 296] <... openat resumed>) = 3 [pid 296] newfstatat(3, "", [pid 430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 430] <... openat resumed>) = 3 [pid 296] getdents64(3, [pid 430] write(3, "1000", 4 [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 430] <... write resumed>) = 4 [pid 296] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 430] close(3 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 430] <... close resumed>) = 0 [pid 296] newfstatat(AT_FDCWD, "./3/binderfs", [pid 430] symlink("/dev/binderfs", "./binderfs" [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./3/binderfs" [pid 430] <... symlink resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 430] write(1, "executing program\n", 18 [pid 296] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 430] <... write resumed>) = 18 [pid 430] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 430] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 430] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[431]}, 88) = 431 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x7f75466579a0, 24) = 0 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] bpf(BPF_MAP_CREATE, NULL, 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... socket resumed>) = 3 [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... bpf resumed>) = 4 [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 431] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... sendmsg resumed>) = 20 [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] memfd_create("syzkaller", 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 431] <... memfd_create resumed>) = 5 [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 431] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./3/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./3/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./3/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./3") = 0 [pid 298] mkdir("./4", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 432 ./strace-static-x86_64: Process 432 attached [pid 432] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 432] chdir("./4") = 0 [pid 432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 432] setpgid(0, 0) = 0 [pid 432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 432] write(3, "1000", 4) = 4 [pid 432] close(3) = 0 [pid 432] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 432] write(1, "executing program\n", 18) = 18 [pid 432] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 432] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 432] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 432] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 432] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[433]}, 88) = 433 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 433 attached [pid 433] set_robust_list(0x7f75466579a0, 24) = 0 [pid 433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 433] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 433] <... futex resumed>) = 1 [pid 433] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] memfd_create("syzkaller", 0) = 5 [pid 433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 295] <... umount2 resumed>) = 0 [pid 295] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./3/file4", [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] newfstatat(AT_FDCWD, "./3/file4", [pid 295] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] openat(AT_FDCWD, "./3/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(4, "", [pid 299] openat(AT_FDCWD, "./3/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... openat resumed>) = 4 [pid 296] newfstatat(AT_FDCWD, "./3/file4", [pid 295] getdents64(4, [pid 299] newfstatat(4, "", [pid 295] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, [pid 299] getdents64(4, [pid 295] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] close(4 [pid 296] umount2("./3/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... close resumed>) = 0 [pid 299] getdents64(4, [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] rmdir("./3/file4" [pid 299] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] openat(AT_FDCWD, "./3/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... rmdir resumed>) = 0 [pid 299] close(4 [pid 296] <... openat resumed>) = 4 [pid 295] getdents64(3, [pid 299] <... close resumed>) = 0 [pid 296] newfstatat(4, "", [pid 299] rmdir("./3/file4" [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 295] close(3 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, [pid 295] <... close resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] rmdir("./3" [pid 296] getdents64(4, [pid 299] close(3 [pid 295] <... rmdir resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 296] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] rmdir("./3" [pid 295] mkdir("./4", 0777 [pid 299] <... rmdir resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 299] mkdir("./4", 0777 [pid 296] getdents64(4, [pid 299] <... mkdir resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 296] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 295] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 296] close(4 [pid 295] ioctl(3, LOOP_CLR_FD [pid 299] ioctl(3, LOOP_CLR_FD [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] <... close resumed>) = 0 [pid 295] close(3 [pid 299] close(3) = 0 [pid 296] rmdir("./3/file4" [pid 295] <... close resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... rmdir resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] getdents64(3, [pid 299] <... clone resumed>, child_tidptr=0x55558ce1a690) = 434 [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] <... clone resumed>, child_tidptr=0x55558ce1a690) = 435 [pid 296] close(3) = 0 [pid 296] rmdir("./3") = 0 [pid 296] mkdir("./4", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 ./strace-static-x86_64: Process 434 attached [pid 434] set_robust_list(0x55558ce1a6a0, 24 [pid 296] ioctl(3, LOOP_CLR_FD [pid 434] <... set_robust_list resumed>) = 0 [pid 434] chdir("./4") = 0 [pid 434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 434] <... prctl resumed>) = 0 [pid 434] setpgid(0, 0) = 0 [pid 434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 296] close(3./strace-static-x86_64: Process 435 attached [pid 435] set_robust_list(0x55558ce1a6a0, 24 [pid 296] <... close resumed>) = 0 [pid 435] <... set_robust_list resumed>) = 0 [pid 435] chdir("./4" [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 434] <... openat resumed>) = 3 [pid 435] <... chdir resumed>) = 0 [pid 435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 435] setpgid(0, 0 [pid 296] <... clone resumed>, child_tidptr=0x55558ce1a690) = 436 [pid 434] write(3, "1000", 4) = 4 [pid 435] <... setpgid resumed>) = 0 [pid 434] close(3 [pid 435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 434] <... close resumed>) = 0 [pid 434] symlink("/dev/binderfs", "./binderfs"executing program executing program ) = 0 [pid 435] <... openat resumed>) = 3 [pid 435] write(3, "1000", 4) = 4 [pid 434] write(1, "executing program\n", 18 [pid 435] close(3 [pid 434] <... write resumed>) = 18 [pid 434] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... close resumed>) = 0 [pid 435] symlink("/dev/binderfs", "./binderfs" [pid 434] <... futex resumed>) = 0 [pid 435] <... symlink resumed>) = 0 [pid 434] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 434] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 434] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 434] rt_sigprocmask(SIG_BLOCK, ~[], [pid 435] write(1, "executing program\n", 18) = 18 [pid 435] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 434] <... rt_sigprocmask resumed>[], 8) = 0 [pid 435] <... rt_sigaction resumed>NULL, 8) = 0 [pid 434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 435] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 435] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 434] <... clone3 resumed> => {parent_tid=[437]}, 88) = 437 [pid 435] rt_sigprocmask(SIG_BLOCK, ~[], [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... rt_sigprocmask resumed>[], 8) = 0 [pid 435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[438]}, 88) = 438 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... write resumed>) = 20699119 ./strace-static-x86_64: Process 436 attached ./strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x7f75466579a0, 24) = 0 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148./strace-static-x86_64: Process 438 attached [pid 436] set_robust_list(0x55558ce1a6a0, 24 [pid 431] munmap(0x7f753e237000, 138412032 [pid 436] <... set_robust_list resumed>) = 0 [pid 437] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] chdir("./4" [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... chdir resumed>) = 0 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 437] <... futex resumed>) = 1 [pid 437] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 436] <... prctl resumed>) = 0 [pid 437] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 438] set_robust_list(0x7f75466579a0, 24 [pid 436] setpgid(0, 0 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 438] <... set_robust_list resumed>) = 0 [pid 436] <... setpgid resumed>) = 0 [pid 437] <... bpf resumed>) = 4 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 436] <... openat resumed>) = 3 [pid 436] write(3, "1000", 4 [pid 437] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 437] <... futex resumed>) = 1 [pid 436] <... write resumed>) = 4 [pid 437] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 438] rt_sigprocmask(SIG_SETMASK, [], [pid 436] close(3 [pid 437] <... sendmsg resumed>) = 20 [pid 436] <... close resumed>) = 0 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] memfd_create("syzkaller", 0) = 5 [pid 437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 436] symlink("/dev/binderfs", "./binderfs" [pid 431] <... munmap resumed>) = 0 [pid 438] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 436] <... symlink resumed>) = 0 executing program [pid 438] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] write(1, "executing program\n", 18 [pid 431] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 438] <... futex resumed>) = 1 [pid 435] <... futex resumed>) = 0 [pid 436] <... write resumed>) = 18 [pid 431] <... openat resumed>) = 6 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] ioctl(6, LOOP_SET_FD, 5 [pid 438] bpf(BPF_MAP_CREATE, NULL, 0 [pid 436] <... futex resumed>) = 0 [pid 438] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 436] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 431] <... ioctl resumed>) = 0 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... rt_sigaction resumed>NULL, 8) = 0 [pid 431] close(5 [pid 438] <... futex resumed>) = 1 [pid 436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 431] <... close resumed>) = 0 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 431] close(6 [pid 436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 1 [pid 438] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... mmap resumed>) = 0x7f7546637000 [pid 435] <... futex resumed>) = 0 [pid 436] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... mprotect resumed>) = 0 [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 438] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 436] rt_sigprocmask(SIG_BLOCK, ~[], [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... rt_sigprocmask resumed>[], 8) = 0 [pid 438] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 436] <... clone3 resumed> => {parent_tid=[439]}, 88) = 439 [pid 438] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 436] rt_sigprocmask(SIG_SETMASK, [], [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 435] <... futex resumed>) = 0 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 431] <... close resumed>) = 0 [pid 438] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] mkdir("./file4", 0777 [pid 438] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 438] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... mkdir resumed>) = 0 [pid 438] <... socket resumed>) = 3 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 438] <... futex resumed>) = 1 [pid 435] <... futex resumed>) = 0 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 438] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... bpf resumed>) = 4 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 438] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 438] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 438] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 438] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... sendmsg resumed>) = 20 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 438] memfd_create("syzkaller", 0 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 438] <... memfd_create resumed>) = 5 [pid 438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 ./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x7f75466579a0, 24) = 0 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 1 [pid 439] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 1 [pid 439] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 1 [pid 439] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 1 [pid 439] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] <... futex resumed>) = 0 [pid 439] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 439] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... socket resumed>) = 3 [pid 436] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 1 [pid 439] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... bpf resumed>) = 4 [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 1 [pid 439] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... futex resumed>) = 0 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 436] <... futex resumed>) = 0 [pid 439] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... futex resumed>) = 0 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 436] <... futex resumed>) = 0 [pid 439] <... sendmsg resumed>) = 20 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 439] memfd_create("syzkaller", 0 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... memfd_create resumed>) = 5 [pid 436] <... futex resumed>) = 0 [pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 439] <... mmap resumed>) = 0x7f753e237000 [ 26.899892][ T431] loop2: detected capacity change from 0 to 40427 [ 26.963895][ T431] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 26.980079][ T431] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 27.000292][ T431] F2FS-fs (loop2): fault_injection options not supported [pid 433] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 27.027879][ T431] F2FS-fs (loop2): fault_type options not supported [ 27.045941][ T431] F2FS-fs (loop2): invalid crc value [pid 437] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 438] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 433] <... write resumed>) = 20699119 [pid 433] munmap(0x7f753e237000, 138412032) = 0 [pid 433] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 433] ioctl(6, LOOP_SET_FD, 5 [pid 439] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 433] <... ioctl resumed>) = 0 [pid 433] close(5) = 0 [pid 433] close(6) = 0 [pid 433] mkdir("./file4", 0777) = 0 [ 27.090350][ T431] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.118459][ T433] loop3: detected capacity change from 0 to 40427 [ 27.135788][ T433] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 27.153146][ T433] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 27.170102][ T433] F2FS-fs (loop3): fault_injection options not supported [pid 433] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 437] <... write resumed>) = 20699119 [pid 437] munmap(0x7f753e237000, 138412032) = 0 [ 27.187374][ T433] F2FS-fs (loop3): fault_type options not supported [ 27.205401][ T433] F2FS-fs (loop3): invalid crc value [ 27.220463][ T431] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 27.227464][ T431] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 437] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 437] ioctl(6, LOOP_SET_FD, 5 [pid 431] <... mount resumed>) = 0 [pid 431] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 431] chdir("./file4") = 0 [pid 431] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 431] ioctl(6, LOOP_CLR_FD) = 0 [pid 431] close(6) = 0 [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 437] <... ioctl resumed>) = 0 [pid 431] <... open resumed>) = 6 [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] fspick(AT_FDCWD, ".", 0) = 7 [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 437] close(5) = 0 [pid 437] close(6 [pid 431] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 431] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=430}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 431] <... futex resumed>) = 1 [pid 431] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 431] <... futex resumed>) = 1 [pid 431] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 431] <... futex resumed>) = 1 [pid 431] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 431] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] exit_group(0) = ? [pid 431] <... futex resumed>) = ? [pid 431] +++ exited with 0 +++ [pid 430] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=430, si_uid=0, si_status=0, si_utime=5, si_stime=19} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./4/binderfs") = 0 [pid 297] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 438] <... write resumed>) = 20699119 [pid 437] <... close resumed>) = 0 [pid 438] munmap(0x7f753e237000, 138412032 [pid 437] mkdir("./file4", 0777 [pid 438] <... munmap resumed>) = 0 [pid 437] <... mkdir resumed>) = 0 [pid 437] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 438] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [ 27.237932][ T433] F2FS-fs (loop3): Found nat_bits in checkpoint [ 27.245434][ T437] loop4: detected capacity change from 0 to 40427 [ 27.264515][ T431] F2FS-fs (loop2): switch discard_unit option is not allowed [pid 438] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 438] close(5) = 0 [pid 438] close(6 [pid 439] <... write resumed>) = 20699119 [pid 439] munmap(0x7f753e237000, 138412032) = 0 [pid 439] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 439] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 439] close(5) = 0 [pid 439] close(6 [pid 433] <... mount resumed>) = 0 [pid 433] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 433] chdir("./file4") = 0 [pid 433] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 433] ioctl(6, LOOP_CLR_FD) = 0 [pid 433] close(6) = 0 [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 433] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 27.314009][ T438] loop0: detected capacity change from 0 to 40427 [ 27.329068][ T439] loop1: detected capacity change from 0 to 40427 [ 27.338337][ T433] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 27.345373][ T433] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 27.356056][ T437] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 0 [pid 433] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] fspick(AT_FDCWD, ".", 0) = 7 [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 439] <... close resumed>) = 0 [pid 438] <... close resumed>) = 0 [pid 438] mkdir("./file4", 0777) = 0 [pid 438] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 433] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 439] mkdir("./file4", 0777 [pid 433] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=432}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 439] <... mkdir resumed>) = 0 [pid 439] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 433] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 433] <... futex resumed>) = 1 [pid 433] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 433] <... futex resumed>) = 1 [pid 433] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 433] <... futex resumed>) = 1 [pid 433] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 433] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] exit_group(0) = ? [pid 433] <... futex resumed>) = ? [pid 433] +++ exited with 0 +++ [pid 432] +++ exited with 0 +++ [ 27.363517][ T437] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 27.369035][ T433] F2FS-fs (loop3): switch discard_unit option is not allowed [ 27.371903][ T437] F2FS-fs (loop4): fault_injection options not supported [ 27.388281][ T438] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 27.395701][ T438] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 27.403917][ T437] F2FS-fs (loop4): fault_type options not supported [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=432, si_uid=0, si_status=0, si_utime=6, si_stime=22} --- [pid 298] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 27.410711][ T438] F2FS-fs (loop0): fault_injection options not supported [ 27.417591][ T438] F2FS-fs (loop0): fault_type options not supported [ 27.428017][ T439] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 27.437753][ T439] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.451505][ T439] F2FS-fs (loop1): fault_injection options not supported [pid 298] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./4/binderfs") = 0 [pid 298] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./4/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./4/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./4/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./4") = 0 [pid 297] mkdir("./5", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 456 ./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 456] chdir("./5") = 0 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 456] setpgid(0, 0) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 456] write(3, "1000", 4) = 4 [pid 456] close(3) = 0 [pid 456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 456] write(1, "executing program\n", 18executing program ) = 18 [pid 456] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 456] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[457]}, 88) = 457 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 457 attached [pid 457] set_robust_list(0x7f75466579a0, 24) = 0 [pid 457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 457] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [ 27.461311][ T437] F2FS-fs (loop4): invalid crc value [ 27.461985][ T439] F2FS-fs (loop1): fault_type options not supported [ 27.466480][ T438] F2FS-fs (loop0): invalid crc value [ 27.474554][ T439] F2FS-fs (loop1): invalid crc value [ 27.501729][ T437] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 457] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 457] <... futex resumed>) = 1 [pid 457] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] memfd_create("syzkaller", 0) = 5 [pid 457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [ 27.521097][ T438] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.540513][ T439] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.605469][ T437] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 27.612607][ T437] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 27.634748][ T438] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 27.642085][ T439] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [pid 437] <... mount resumed>) = 0 [pid 437] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 437] chdir("./file4") = 0 [pid 437] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 437] ioctl(6, LOOP_CLR_FD) = 0 [pid 437] close(6) = 0 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 437] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... open resumed>) = 6 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 437] fspick(AT_FDCWD, ".", 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... fspick resumed>) = 7 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 437] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... mount resumed>) = 0 [pid 438] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 438] chdir("./file4") = 0 [pid 438] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 438] ioctl(6, LOOP_CLR_FD) = 0 [pid 438] close(6) = 0 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 1 [pid 439] <... mount resumed>) = 0 [pid 438] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 438] <... open resumed>) = 6 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... openat resumed>) = 5 [pid 438] <... futex resumed>) = 1 [pid 435] <... futex resumed>) = 0 [pid 439] chdir("./file4" [pid 438] fspick(AT_FDCWD, ".", 0 [pid 437] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... chdir resumed>) = 0 [pid 438] <... fspick resumed>) = 7 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 439] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 437] <... futex resumed>) = 1 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 0 [pid 439] <... openat resumed>) = 6 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] ioctl(6, LOOP_CLR_FD [pid 437] <... open resumed>) = 8 [pid 434] <... futex resumed>) = 0 [pid 439] <... ioctl resumed>) = 0 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] close(6 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... futex resumed>) = 1 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... close resumed>) = 0 [pid 437] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 437] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 439] <... futex resumed>) = 1 [ 27.648933][ T439] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 27.666264][ T438] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.675197][ T437] F2FS-fs (loop4): switch discard_unit option is not allowed [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 436] <... futex resumed>) = 0 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 439] <... open resumed>) = 6 [pid 437] <... futex resumed>) = 1 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] sendfile(6, 6, NULL, 281483568746501 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = 1 [pid 434] <... futex resumed>) = 0 [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 437] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = 0 [pid 439] <... futex resumed>) = 0 [pid 437] <... sendto resumed>) = 36 [pid 436] <... futex resumed>) = 1 [pid 439] fspick(AT_FDCWD, ".", 0 [pid 437] recvfrom(3, [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] <... fspick resumed>) = 7 [pid 437] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=434}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] <... futex resumed>) = 1 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... futex resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./4/file4", [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 438] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 437] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 435] <... futex resumed>) = 0 [pid 298] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = 1 [pid 434] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 435] <... futex resumed>) = 1 [pid 439] <... futex resumed>) = 1 [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "./4/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 437] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 298] <... openat resumed>) = 4 [pid 437] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 298] newfstatat(4, "", [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 437] <... futex resumed>) = 1 [pid 434] <... futex resumed>) = 0 [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(4, [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 0 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 298] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 437] <... futex resumed>) = 0 [pid 434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] getdents64(4, [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 437] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 298] close(4 [pid 437] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 298] <... close resumed>) = 0 [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] rmdir("./4/file4" [pid 437] <... futex resumed>) = 1 [pid 434] <... futex resumed>) = 0 [pid 438] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 438] <... open resumed>) = 8 [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... futex resumed>) = 1 [pid 434] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rmdir resumed>) = 0 [pid 439] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 0 [pid 298] getdents64(3, [pid 439] <... open resumed>) = 8 [pid 438] <... futex resumed>) = 1 [pid 437] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 435] <... futex resumed>) = 0 [pid 434] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 439] <... futex resumed>) = 1 [pid 438] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 437] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 0 [pid 298] close(3 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 437] <... futex resumed>) = 1 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 434] <... futex resumed>) = 0 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] exit_group(0 [pid 298] <... close resumed>) = 0 [pid 439] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 438] <... futex resumed>) = 0 [pid 437] <... futex resumed>) = ? [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... exit_group resumed>) = ? [pid 298] rmdir("./4" [pid 439] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 438] sendfile(6, 6, NULL, 281483568746501 [pid 437] +++ exited with 0 +++ [pid 435] <... futex resumed>) = 0 [pid 438] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] +++ exited with 0 +++ [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=434, si_uid=0, si_status=0, si_utime=7, si_stime=21} --- [pid 298] <... rmdir resumed>) = 0 [pid 439] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 298] mkdir("./5", 0777 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... restart_syscall resumed>) = 0 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 1 [pid 298] <... mkdir resumed>) = 0 [pid 439] sendfile(6, 6, NULL, 281483568746501 [pid 438] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 439] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 438] <... sendto resumed>) = 36 [pid 299] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] recvfrom(3, [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... openat resumed>) = 3 [pid 439] <... futex resumed>) = 1 [pid 438] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=435}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 436] <... futex resumed>) = 0 [pid 299] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] ioctl(3, LOOP_CLR_FD [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 0 [pid 299] newfstatat(3, "", [pid 298] close(3 [pid 439] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] getdents64(3, [pid 298] <... close resumed>) = 0 [pid 438] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 438] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 299] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 438] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./4/binderfs", [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./4/binderfs" [pid 439] <... sendto resumed>) = 36 [pid 438] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 1 [pid 299] <... unlink resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 439] recvfrom(3, [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 439] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=436}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 463 attached [pid 463] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 463] chdir("./5") = 0 [pid 463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 463] setpgid(0, 0) = 0 [pid 463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 463] write(3, "1000", 4) = 4 [pid 463] close(3) = 0 [pid 463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 463] write(1, "executing program\n", 18executing program ) = 18 [pid 463] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 463] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 463] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 463] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[464]}, 88) = 464 [pid 463] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x7f75466579a0, 24) = 0 [pid 464] rt_sigprocmask(SIG_SETMASK, [], [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... clone resumed>, child_tidptr=0x55558ce1a690) = 463 [pid 439] <... futex resumed>) = 1 [pid 435] <... futex resumed>) = 1 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 438] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 0 [pid 438] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 438] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 436] <... futex resumed>) = 1 [pid 439] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [ 27.711213][ T438] F2FS-fs (loop0): switch discard_unit option is not allowed [ 27.724738][ T439] F2FS-fs (loop1): switch discard_unit option is not allowed [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 439] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 0 [pid 436] <... futex resumed>) = 1 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 439] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 439] <... futex resumed>) = 0 [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 438] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = 1 [pid 435] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 438] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 438] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = 1 [pid 435] <... futex resumed>) = 0 [pid 439] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 438] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 435] exit_group(0 [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = ? [pid 435] <... exit_group resumed>) = ? [pid 439] <... futex resumed>) = 1 [pid 438] +++ exited with 0 +++ [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 435] +++ exited with 0 +++ [pid 439] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=435, si_uid=0, si_status=0, si_utime=6, si_stime=20} --- [pid 439] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 439] <... futex resumed>) = 1 [pid 436] <... futex resumed>) = 0 [pid 295] <... restart_syscall resumed>) = 0 [pid 439] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] exit_group(0 [pid 439] <... futex resumed>) = ? [pid 436] <... exit_group resumed>) = ? [pid 439] +++ exited with 0 +++ [pid 436] +++ exited with 0 +++ [pid 295] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=436, si_uid=0, si_status=0, si_utime=6, si_stime=19} --- [pid 295] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 295] <... openat resumed>) = 3 [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./4/binderfs") = 0 [pid 295] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 464] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 464] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 464] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 463] <... futex resumed>) = 0 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 463] <... futex resumed>) = 0 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 463] <... futex resumed>) = 0 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 463] <... futex resumed>) = 0 [pid 296] <... restart_syscall resumed>) = 0 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 464] <... socket resumed>) = 3 [pid 463] <... futex resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... openat resumed>) = 3 [pid 464] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] newfstatat(3, "", [pid 464] <... bpf resumed>) = 4 [pid 463] <... futex resumed>) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] getdents64(3, [pid 464] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 464] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 464] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] newfstatat(AT_FDCWD, "./4/binderfs", [pid 464] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] unlink("./4/binderfs" [pid 464] <... futex resumed>) = 1 [pid 463] <... futex resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 464] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 464] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 464] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 464] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 464] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... sendmsg resumed>) = 20 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 464] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 464] memfd_create("syzkaller", 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 464] <... memfd_create resumed>) = 5 [pid 464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 457] <... write resumed>) = 20699119 [pid 457] munmap(0x7f753e237000, 138412032) = 0 [pid 457] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 457] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 457] close(5) = 0 [pid 457] close(6 [pid 464] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 457] <... close resumed>) = 0 [pid 457] mkdir("./file4", 0777) = 0 [ 27.861868][ T457] loop2: detected capacity change from 0 to 40427 [pid 457] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./4/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./4/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./4/file4") = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./4") = 0 [pid 299] mkdir("./5", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 465 ./strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 465] chdir("./5") = 0 [pid 465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 465] setpgid(0, 0 [pid 295] <... umount2 resumed>) = 0 [pid 465] <... setpgid resumed>) = 0 [pid 295] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 465] <... openat resumed>) = 3 [pid 295] newfstatat(AT_FDCWD, "./4/file4", [pid 465] write(3, "1000", 4 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 465] <... write resumed>) = 4 [pid 295] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 465] close(3 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 465] <... close resumed>) = 0 [pid 295] openat(AT_FDCWD, "./4/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 465] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 465] write(1, "executing program\n", 18 [pid 295] <... openat resumed>) = 4 [pid 465] <... write resumed>) = 18 [pid 465] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] newfstatat(4, "", [pid 465] <... futex resumed>) = 0 [pid 465] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 465] <... rt_sigaction resumed>NULL, 8) = 0 [pid 295] getdents64(4, [pid 465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 295] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 295] getdents64(4, [pid 465] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 295] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 465] rt_sigprocmask(SIG_BLOCK, ~[], [pid 295] close(4 [pid 465] <... rt_sigprocmask resumed>[], 8) = 0 [pid 465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 295] <... close resumed>) = 0 [pid 295] rmdir("./4/file4" [pid 465] <... clone3 resumed> => {parent_tid=[466]}, 88) = 466 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] getdents64(3, [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./4") = 0 ./strace-static-x86_64: Process 466 attached [pid 295] mkdir("./5", 0777 [pid 466] set_robust_list(0x7f75466579a0, 24) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 466] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 466] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 295] <... clone resumed>, child_tidptr=0x55558ce1a690) = 467 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 ./strace-static-x86_64: Process 467 attached [pid 466] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 [pid 466] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 [pid 466] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 [pid 466] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 466] <... futex resumed>) = 1 [pid 466] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 [pid 466] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 466] <... futex resumed>) = 1 [pid 466] memfd_create("syzkaller", 0) = 5 [pid 466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 467] set_robust_list(0x55558ce1a6a0, 24) = 0 [ 27.975668][ T457] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 28.009182][ T457] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 28.017666][ T457] F2FS-fs (loop2): fault_injection options not supported [pid 467] chdir("./5") = 0 [pid 467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 467] setpgid(0, 0) = 0 [pid 467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 467] write(3, "1000", 4) = 4 [pid 467] close(3) = 0 [pid 467] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 467] write(1, "executing program\n", 18) = 18 [pid 467] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 467] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 467] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[469]}, 88) = 469 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... write resumed>) = 20699119 ./strace-static-x86_64: Process 469 attached [pid 469] set_robust_list(0x7f75466579a0, 24) = 0 [pid 469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 469] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 296] <... umount2 resumed>) = 0 [pid 469] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 469] <... futex resumed>) = 1 [pid 469] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 464] munmap(0x7f753e237000, 138412032 [pid 469] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 464] <... munmap resumed>) = 0 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] memfd_create("syzkaller", 0) = 5 [pid 469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 296] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./4/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./4/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./4/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 464] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 296] close(4 [pid 464] <... openat resumed>) = 6 [pid 296] <... close resumed>) = 0 [ 28.025295][ T457] F2FS-fs (loop2): fault_type options not supported [ 28.033958][ T457] F2FS-fs (loop2): invalid crc value [ 28.053890][ T457] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 296] rmdir("./4/file4" [pid 464] ioctl(6, LOOP_SET_FD, 5 [pid 296] <... rmdir resumed>) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./4") = 0 [pid 296] mkdir("./5", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 472 ./strace-static-x86_64: Process 472 attached [pid 472] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 472] chdir("./5") = 0 [pid 472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 472] setpgid(0, 0) = 0 [pid 472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 472] write(3, "1000", 4) = 4 [pid 472] close(3) = 0 [pid 472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 472] write(1, "executing program\n", 18executing program ) = 18 [pid 472] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 472] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[473]}, 88) = 473 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... ioctl resumed>) = 0 [pid 464] close(5) = 0 [pid 464] close(6./strace-static-x86_64: Process 473 attached ) = 0 [pid 473] set_robust_list(0x7f75466579a0, 24) = 0 [pid 473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 473] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] bpf(BPF_MAP_CREATE, NULL, 0 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] mkdir("./file4", 0777 [pid 473] <... socket resumed>) = 3 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... bpf resumed>) = 4 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... mkdir resumed>) = 0 [ 28.075394][ T464] loop3: detected capacity change from 0 to 40427 [pid 464] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 473] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... sendmsg resumed>) = 20 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] memfd_create("syzkaller", 0 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 473] <... memfd_create resumed>) = 5 [pid 473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [ 28.121355][ T464] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 28.141755][ T464] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 28.149841][ T464] F2FS-fs (loop3): fault_injection options not supported [ 28.150968][ T457] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 457] <... mount resumed>) = 0 [pid 457] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 457] chdir("./file4") = 0 [pid 457] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 457] ioctl(6, LOOP_CLR_FD) = 0 [pid 457] close(6) = 0 [ 28.174117][ T464] F2FS-fs (loop3): fault_type options not supported [ 28.180084][ T457] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.189278][ T464] F2FS-fs (loop3): invalid crc value [ 28.211296][ T464] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 457] fspick(AT_FDCWD, ".", 0) = 7 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 457] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 457] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 457] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 457] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 456] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 456] futex(0x7f754672a75c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546616000 [pid 456] mprotect(0x7f7546617000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546636990, parent_tid=0x7f7546636990, exit_signal=0, stack=0x7f7546616000, stack_size=0x20300, tls=0x7f75466366c0} => {parent_tid=[479]}, 88) = 479 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] futex(0x7f754672a758, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f754672a75c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 479 attached [pid 479] set_robust_list(0x7f75466369a0, 24) = 0 [ 28.227303][ T457] F2FS-fs (loop2): switch discard_unit option is not allowed [ 28.242832][ T457] handle_bad_sector: 65 callbacks suppressed [ 28.242851][ T457] attempt to access beyond end of device [ 28.242851][ T457] loop2: rw=2049, want=53256, limit=40427 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] sendfile(6, 6, NULL, 281483568746501 [pid 473] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 479] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 479] futex(0x7f754672a75c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 479] futex(0x7f754672a758, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 457] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=456}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] <... futex resumed>) = 0 [pid 464] <... mount resumed>) = 0 [pid 464] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 464] chdir("./file4") = 0 [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 464] ioctl(6, LOOP_CLR_FD) = 0 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 464] close(6 [pid 457] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 464] <... close resumed>) = 0 [pid 457] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 1 [pid 463] <... futex resumed>) = 0 [pid 457] <... futex resumed>) = 0 [pid 464] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 464] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... open resumed>) = 6 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 464] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 464] fspick(AT_FDCWD, ".", 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... fspick resumed>) = 7 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] <... futex resumed>) = 0 [pid 464] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 463] <... futex resumed>) = 0 [pid 464] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 457] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 457] <... futex resumed>) = 0 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] <... futex resumed>) = 1 [pid 464] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [ 28.310473][ T479] attempt to access beyond end of device [ 28.310473][ T479] loop2: rw=0, want=53256, limit=40427 [ 28.310964][ T464] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 28.341285][ T464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.353318][ T464] F2FS-fs (loop3): switch discard_unit option is not allowed [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 464] <... open resumed>) = 8 [pid 456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 457] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] <... futex resumed>) = 1 [pid 464] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 457] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 457] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] exit_group(0 [pid 457] <... futex resumed>) = ? [pid 479] <... futex resumed>) = ? [pid 456] <... exit_group resumed>) = ? [pid 457] +++ exited with 0 +++ [pid 479] +++ exited with 0 +++ [pid 456] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=456, si_uid=0, si_status=0, si_utime=5, si_stime=21} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./5/binderfs") = 0 [pid 297] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 464] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 464] sendfile(6, 6, NULL, 281483568746501 [pid 466] <... write resumed>) = 20699119 [ 28.373784][ T464] attempt to access beyond end of device [ 28.373784][ T464] loop3: rw=2049, want=53256, limit=40427 [ 28.398792][ T297] attempt to access beyond end of device [ 28.398792][ T297] loop2: rw=2049, want=45104, limit=40427 [ 28.411331][ T464] attempt to access beyond end of device [ 28.411331][ T464] loop3: rw=0, want=53256, limit=40427 [pid 466] munmap(0x7f753e237000, 138412032) = 0 [pid 464] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 464] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 464] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=463}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 464] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 464] <... futex resumed>) = 1 [pid 464] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 464] <... futex resumed>) = 1 [pid 464] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 463] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 464] <... futex resumed>) = 1 [pid 464] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 464] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = 0 [pid 463] exit_group(0) = ? [pid 464] <... futex resumed>) = ? [pid 466] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 466] ioctl(6, LOOP_SET_FD, 5 [pid 464] +++ exited with 0 +++ [pid 463] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=463, si_uid=0, si_status=0, si_utime=3, si_stime=17} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 466] <... ioctl resumed>) = 0 [pid 466] close(5) = 0 [pid 466] close(6 [pid 298] <... restart_syscall resumed>) = 0 [pid 466] <... close resumed>) = 0 [pid 466] mkdir("./file4", 0777) = 0 [pid 298] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./5/binderfs") = 0 [pid 298] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 466] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 469] <... write resumed>) = 20699119 [pid 469] munmap(0x7f753e237000, 138412032) = 0 [pid 469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [ 28.437623][ T466] loop4: detected capacity change from 0 to 40427 [ 28.463356][ T298] attempt to access beyond end of device [ 28.463356][ T298] loop3: rw=2049, want=45104, limit=40427 [pid 469] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 469] close(5) = 0 [pid 469] close(6 [pid 473] <... write resumed>) = 20699119 [pid 473] munmap(0x7f753e237000, 138412032) = 0 [pid 473] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 473] ioctl(6, LOOP_SET_FD, 5 [pid 469] <... close resumed>) = 0 [pid 469] mkdir("./file4", 0777) = 0 [pid 469] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 473] <... ioctl resumed>) = 0 [ 28.486843][ T469] loop0: detected capacity change from 0 to 40427 [ 28.518247][ T473] loop1: detected capacity change from 0 to 40427 [pid 473] close(5) = 0 [ 28.534094][ T466] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 28.541111][ T466] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.550447][ T466] F2FS-fs (loop4): fault_injection options not supported [ 28.557435][ T466] F2FS-fs (loop4): fault_type options not supported [ 28.565070][ T466] F2FS-fs (loop4): invalid crc value [ 28.571526][ T466] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.580741][ T469] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [pid 473] close(6) = 0 [pid 473] mkdir("./file4", 0777) = 0 [pid 473] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 297] <... umount2 resumed>) = 0 [ 28.587722][ T469] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 28.610264][ T469] F2FS-fs (loop0): fault_injection options not supported [ 28.617204][ T469] F2FS-fs (loop0): fault_type options not supported [ 28.630559][ T473] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [pid 297] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./5/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./5/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./5/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./5") = 0 [pid 297] mkdir("./6", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 485 ./strace-static-x86_64: Process 485 attached [pid 485] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 485] chdir("./6") = 0 [pid 485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 485] setpgid(0, 0) = 0 [pid 485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 28.637324][ T473] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 28.656861][ T473] F2FS-fs (loop1): fault_injection options not supported [ 28.665988][ T473] F2FS-fs (loop1): fault_type options not supported [ 28.672443][ T469] F2FS-fs (loop0): invalid crc value [ 28.679522][ T466] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [pid 485] write(3, "1000", 4) = 4 [pid 485] close(3) = 0 [pid 485] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 485] write(1, "executing program\n", 18) = 18 [pid 485] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 485] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 485] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[489]}, 88) = 489 [pid 485] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 489 attached [pid 489] set_robust_list(0x7f75466579a0, 24) = 0 [pid 489] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 489] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 489] <... futex resumed>) = 1 [pid 489] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] memfd_create("syzkaller", 0) = 5 [pid 489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 466] <... mount resumed>) = 0 [pid 298] <... umount2 resumed>) = 0 [pid 489] <... mmap resumed>) = 0x7f753e237000 [pid 466] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 298] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 466] <... openat resumed>) = 5 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 466] chdir("./file4" [pid 298] newfstatat(AT_FDCWD, "./5/file4", [pid 466] <... chdir resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 466] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 298] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 466] <... openat resumed>) = 6 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 466] ioctl(6, LOOP_CLR_FD [pid 298] openat(AT_FDCWD, "./5/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 466] <... ioctl resumed>) = 0 [pid 298] <... openat resumed>) = 4 [pid 466] close(6 [pid 298] newfstatat(4, "", [pid 466] <... close resumed>) = 0 [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 466] <... futex resumed>) = 1 [pid 298] getdents64(4, [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(4, [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 298] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 466] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 298] close(4 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... open resumed>) = 6 [pid 298] <... close resumed>) = 0 [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] rmdir("./5/file4" [pid 466] <... futex resumed>) = 1 [pid 465] <... futex resumed>) = 0 [pid 466] fspick(AT_FDCWD, ".", 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rmdir resumed>) = 0 [pid 466] <... fspick resumed>) = 7 [pid 298] getdents64(3, [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 466] <... futex resumed>) = 0 [pid 298] close(3 [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] <... close resumed>) = 0 [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 298] rmdir("./5" [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... rmdir resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] mkdir("./6", 0777 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... mkdir resumed>) = 0 [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 466] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... openat resumed>) = 3 [ 28.686635][ T466] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.695927][ T469] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.703663][ T473] F2FS-fs (loop1): invalid crc value [ 28.717867][ T473] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 493 [pid 466] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 465] <... futex resumed>) = 0 [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 466] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 466] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 493 attached [pid 493] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 493] chdir("./6") = 0 [pid 493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 493] setpgid(0, 0) = 0 [pid 493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 493] write(3, "1000", 4) = 4 [pid 493] close(3) = 0 [pid 493] symlink("/dev/binderfs", "./binderfs") = 0 [pid 466] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 493] write(1, "executing program\n", 18executing program ) = 18 [pid 493] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 493] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 493] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 493] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 466] sendfile(6, 6, NULL, 281483568746501 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... clone3 resumed> => {parent_tid=[494]}, 88) = 494 [pid 493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 494 attached [pid 494] set_robust_list(0x7f75466579a0, 24) = 0 [pid 494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 494] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 466] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 494] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 1 [pid 494] <... futex resumed>) = 1 [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 0 [pid 493] <... futex resumed>) = 1 [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 494] bpf(BPF_MAP_CREATE, NULL, 0 [pid 466] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 494] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... sendto resumed>) = 36 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... futex resumed>) = 0 [pid 466] recvfrom(3, [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 466] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=465}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 0 [pid 493] <... futex resumed>) = 1 [pid 466] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 465] <... futex resumed>) = 0 [pid 494] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 1 [pid 493] <... futex resumed>) = 0 [pid 466] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 465] <... futex resumed>) = 0 [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 494] <... futex resumed>) = 1 [pid 493] <... futex resumed>) = 0 [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 466] <... futex resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 494] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 494] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 466] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 1 [pid 493] <... futex resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 465] <... futex resumed>) = 0 [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] <... futex resumed>) = 0 [pid 494] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 465] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 494] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 466] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 1 [pid 465] <... futex resumed>) = 0 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 466] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] exit_group(0 [pid 494] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... futex resumed>) = ? [pid 465] <... exit_group resumed>) = ? [pid 494] <... socket resumed>) = 3 [pid 466] +++ exited with 0 +++ [pid 465] +++ exited with 0 +++ [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=465, si_uid=0, si_status=0, si_utime=4, si_stime=24} --- [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 494] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... bpf resumed>) = 4 [ 28.733726][ T466] F2FS-fs (loop4): switch discard_unit option is not allowed [ 28.752486][ T466] attempt to access beyond end of device [ 28.752486][ T466] loop4: rw=2049, want=53256, limit=40427 [ 28.774939][ T466] attempt to access beyond end of device [ 28.774939][ T466] loop4: rw=0, want=53256, limit=40427 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... restart_syscall resumed>) = 0 [pid 494] <... futex resumed>) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 494] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 494] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 494] <... futex resumed>) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 299] newfstatat(3, "", [pid 494] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 494] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(3, [pid 494] <... futex resumed>) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 494] <... sendmsg resumed>) = 20 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 494] <... futex resumed>) = 0 [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./5/binderfs", [pid 494] memfd_create("syzkaller", 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 494] <... memfd_create resumed>) = 5 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] unlink("./5/binderfs" [pid 494] <... mmap resumed>) = 0x7f753e237000 [pid 299] <... unlink resumed>) = 0 [pid 299] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW [ 28.837693][ T299] attempt to access beyond end of device [ 28.837693][ T299] loop4: rw=2049, want=45104, limit=40427 [ 28.870341][ T469] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 28.877196][ T469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 489] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 469] <... mount resumed>) = 0 [pid 469] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 469] chdir("./file4") = 0 [pid 469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 469] ioctl(6, LOOP_CLR_FD) = 0 [pid 469] close(6) = 0 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] fspick(AT_FDCWD, ".", 0) = 7 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 473] <... mount resumed>) = 0 [pid 469] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 473] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 473] chdir("./file4") = 0 [pid 473] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 473] ioctl(6, LOOP_CLR_FD) = 0 [pid 473] close(6) = 0 [ 28.895365][ T473] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 28.904432][ T473] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.925527][ T469] F2FS-fs (loop0): switch discard_unit option is not allowed [pid 469] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... open resumed>) = 6 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] fspick(AT_FDCWD, ".", 0 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... fspick resumed>) = 7 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 469] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... open resumed>) = 8 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] sendfile(6, 6, NULL, 281483568746501 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 0 [pid 473] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 473] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 469] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=467}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 469] <... futex resumed>) = 1 [pid 469] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = 0 [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... sendto resumed>) = 36 [pid 473] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=472}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 473] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 473] <... futex resumed>) = 0 [pid 472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 473] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 473] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... futex resumed>) = 1 [pid 467] <... futex resumed>) = 0 [pid 473] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 469] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 467] <... futex resumed>) = 0 [pid 473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] <... futex resumed>) = 0 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 473] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 472] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 469] <... futex resumed>) = 0 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 473] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 469] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 467] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 467] <... futex resumed>) = 0 [pid 473] <... futex resumed>) = 1 [pid 472] <... futex resumed>) = 0 [pid 469] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 473] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] exit_group(0 [pid 469] <... futex resumed>) = 0 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 473] <... futex resumed>) = ? [pid 472] <... exit_group resumed>) = ? [pid 469] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] exit_group(0 [pid 473] +++ exited with 0 +++ [pid 469] <... futex resumed>) = ? [pid 467] <... exit_group resumed>) = ? [pid 472] +++ exited with 0 +++ [pid 469] +++ exited with 0 +++ [pid 467] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=472, si_uid=0, si_status=0, si_utime=5, si_stime=26} --- [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=467, si_uid=0, si_status=0, si_utime=4, si_stime=17} --- [pid 296] restart_syscall(<... resuming interrupted clone ...> [ 28.945515][ T469] attempt to access beyond end of device [ 28.945515][ T469] loop0: rw=2049, want=53256, limit=40427 [ 28.959106][ T473] F2FS-fs (loop1): switch discard_unit option is not allowed [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 489] <... write resumed>) = 20699119 [pid 296] <... restart_syscall resumed>) = 0 [pid 295] <... restart_syscall resumed>) = 0 [pid 489] munmap(0x7f753e237000, 138412032 [pid 296] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 296] newfstatat(3, "", [pid 295] newfstatat(3, "", [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, [pid 295] getdents64(3, [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./5/binderfs", [pid 295] newfstatat(AT_FDCWD, "./5/binderfs", [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./5/binderfs" [pid 295] unlink("./5/binderfs" [pid 296] <... unlink resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 296] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 489] <... munmap resumed>) = 0 [pid 489] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 489] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 489] close(5) = 0 [pid 489] close(6) = 0 [pid 489] mkdir("./file4", 0777) = 0 [ 29.013258][ T489] loop2: detected capacity change from 0 to 40427 [pid 489] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./5/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./5/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./5/file4") = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./5") = 0 [pid 299] mkdir("./6", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 497 ./strace-static-x86_64: Process 497 attached [pid 497] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 497] chdir("./6") = 0 [pid 497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 497] setpgid(0, 0) = 0 [pid 497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 497] write(3, "1000", 4) = 4 [pid 497] close(3) = 0 [pid 497] symlink("/dev/binderfs", "./binderfs") = 0 [pid 497] write(1, "executing program\n", 18executing program ) = 18 [pid 497] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 497] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 497] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[498]}, 88) = 498 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 29.095142][ T489] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 29.113702][ T489] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 498 attached [pid 498] set_robust_list(0x7f75466579a0, 24) = 0 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 498] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 498] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 498] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 498] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 498] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 498] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... bpf resumed>) = 4 [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 498] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 498] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 498] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... sendmsg resumed>) = 20 [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 498] memfd_create("syzkaller", 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 498] <... memfd_create resumed>) = 5 [pid 498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [ 29.140248][ T489] F2FS-fs (loop2): fault_injection options not supported [pid 494] <... write resumed>) = 20699119 [pid 494] munmap(0x7f753e237000, 138412032) = 0 [pid 494] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 494] ioctl(6, LOOP_SET_FD, 5 [pid 295] <... umount2 resumed>) = 0 [pid 295] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./5/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./5/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 494] <... ioctl resumed>) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./5/file4") = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./5") = 0 [pid 295] mkdir("./6", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 503 [ 29.169690][ T489] F2FS-fs (loop2): fault_type options not supported [ 29.187291][ T489] F2FS-fs (loop2): invalid crc value [ 29.203314][ T494] loop3: detected capacity change from 0 to 40427 [pid 494] close(5) = 0 [pid 494] close(6) = 0 [pid 494] mkdir("./file4", 0777) = 0 [pid 494] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"..../strace-static-x86_64: Process 503 attached [pid 296] <... umount2 resumed>) = 0 [pid 503] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 503] chdir("./6") = 0 [pid 503] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program ) = 0 [pid 503] setpgid(0, 0) = 0 [pid 503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 503] write(3, "1000", 4) = 4 [pid 503] close(3) = 0 [pid 503] symlink("/dev/binderfs", "./binderfs") = 0 [pid 503] write(1, "executing program\n", 18) = 18 [pid 503] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 503] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 503] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 503] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 503] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[504]}, 88) = 504 [pid 503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 504 attached [pid 504] set_robust_list(0x7f75466579a0, 24) = 0 [ 29.218634][ T489] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.231526][ T494] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 29.251878][ T494] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] <... futex resumed>) = 0 [pid 296] newfstatat(AT_FDCWD, "./5/file4", [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] umount2("./5/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 504] <... futex resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 504] bpf(BPF_MAP_CREATE, NULL, 0 [pid 296] openat(AT_FDCWD, "./5/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 504] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... openat resumed>) = 4 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] newfstatat(4, "", [pid 504] <... futex resumed>) = 1 [pid 503] <... futex resumed>) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] getdents64(4, [pid 503] <... futex resumed>) = 0 [pid 504] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 504] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 296] getdents64(4, [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 504] <... futex resumed>) = 1 [pid 503] <... futex resumed>) = 0 [pid 296] close(4 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... close resumed>) = 0 [pid 503] <... futex resumed>) = 0 [pid 296] rmdir("./5/file4" [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 296] <... rmdir resumed>) = 0 [pid 504] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 296] getdents64(3, [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 504] <... futex resumed>) = 1 [pid 503] <... futex resumed>) = 0 [pid 296] close(3 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... close resumed>) = 0 [pid 503] <... futex resumed>) = 0 [pid 296] rmdir("./5" [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 296] <... rmdir resumed>) = 0 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 296] mkdir("./6", 0777 [pid 504] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 503] <... futex resumed>) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 504] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 504] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... openat resumed>) = 3 [pid 504] <... futex resumed>) = 1 [pid 504] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] <... futex resumed>) = 0 [pid 296] ioctl(3, LOOP_CLR_FD [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 503] <... futex resumed>) = 1 [pid 296] close(3 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... close resumed>) = 0 [pid 504] <... futex resumed>) = 0 [pid 504] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... clone resumed>, child_tidptr=0x55558ce1a690) = 505 [pid 504] <... futex resumed>) = 0 [pid 504] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 504] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 503] <... futex resumed>) = 0 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 0 [pid 503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 504] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 503] <... futex resumed>) = 0 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 504] <... futex resumed>) = 0 [pid 503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 504] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... sendmsg resumed>) = 20 [pid 503] <... futex resumed>) = 0 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 0 [pid 503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 504] memfd_create("syzkaller", 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... memfd_create resumed>) = 5 [pid 503] <... futex resumed>) = 0 [pid 504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 504] <... mmap resumed>) = 0x7f753e237000 [ 29.270170][ T494] F2FS-fs (loop3): fault_injection options not supported [ 29.285056][ T494] F2FS-fs (loop3): fault_type options not supported [ 29.305708][ T494] F2FS-fs (loop3): invalid crc value ./strace-static-x86_64: Process 505 attached [pid 505] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 505] chdir("./6") = 0 [pid 505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 505] setpgid(0, 0) = 0 [pid 505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 505] write(3, "1000", 4) = 4 [pid 505] close(3) = 0 [pid 505] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 505] write(1, "executing program\n", 18) = 18 [pid 505] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 498] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 505] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 505] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[509]}, 88) = 509 [pid 505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x7f75466579a0, 24) = 0 [pid 509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 509] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [ 29.316050][ T489] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 509] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 509] <... futex resumed>) = 1 [pid 509] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] memfd_create("syzkaller", 0) = 5 [pid 509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 489] <... mount resumed>) = 0 [pid 489] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 489] chdir("./file4") = 0 [pid 489] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 489] ioctl(6, LOOP_CLR_FD) = 0 [pid 489] close(6) = 0 [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 489] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 0 [pid 489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] fspick(AT_FDCWD, ".", 0) = 7 [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 EINVAL (Invalid argument) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 489] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=485}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 489] <... futex resumed>) = 1 [pid 489] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 489] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 485] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 489] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 489] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 485] <... futex resumed>) = 0 [pid 485] exit_group(0) = ? [pid 489] +++ exited with 0 +++ [pid 485] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=485, si_uid=0, si_status=0, si_utime=2, si_stime=23} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./6/binderfs") = 0 [ 29.344780][ T494] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.354761][ T489] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 29.382975][ T489] F2FS-fs (loop2): switch discard_unit option is not allowed [pid 297] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 504] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 494] <... mount resumed>) = 0 [pid 494] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 494] chdir("./file4") = 0 [pid 494] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 494] ioctl(6, LOOP_CLR_FD) = 0 [pid 494] close(6) = 0 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 494] fspick(AT_FDCWD, ".", 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... fspick resumed>) = 7 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 494] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... futex resumed>) = 1 [pid 494] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... futex resumed>) = 1 [pid 494] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... futex resumed>) = 1 [pid 494] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... futex resumed>) = 1 [pid 494] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 494] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=493}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... futex resumed>) = 1 [pid 494] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 494] <... futex resumed>) = 1 [pid 494] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 494] <... futex resumed>) = 1 [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 494] <... futex resumed>) = 1 [pid 494] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 494] <... futex resumed>) = 1 [pid 494] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 494] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = 0 [pid 493] exit_group(0) = ? [pid 494] <... futex resumed>) = ? [pid 494] +++ exited with 0 +++ [pid 493] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=493, si_uid=0, si_status=0, si_utime=4, si_stime=22} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./6/binderfs") = 0 [pid 298] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 498] <... write resumed>) = 20699119 [pid 498] munmap(0x7f753e237000, 138412032) = 0 [ 29.474244][ T494] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 29.484314][ T494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.510404][ T494] F2FS-fs (loop3): switch discard_unit option is not allowed [pid 509] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 498] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 498] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 498] close(5) = 0 [pid 498] close(6 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./6/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./6/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./6/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./6") = 0 [pid 297] mkdir("./7", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 512 [ 29.558054][ T498] loop4: detected capacity change from 0 to 40427 ./strace-static-x86_64: Process 512 attached [pid 512] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 512] chdir("./7") = 0 [pid 512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 512] setpgid(0, 0) = 0 [pid 512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 512] write(3, "1000", 4) = 4 [pid 512] close(3) = 0 [pid 512] symlink("/dev/binderfs", "./binderfs") = 0 [pid 512] write(1, "executing program\n", 18executing program ) = 18 [pid 512] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 512] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 512] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 512] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[513]}, 88) = 513 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 513 attached [pid 513] set_robust_list(0x7f75466579a0, 24) = 0 [pid 513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 513] <... futex resumed>) = 1 [pid 513] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 498] <... close resumed>) = 0 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] mkdir("./file4", 0777 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 498] <... mkdir resumed>) = 0 [pid 498] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] memfd_create("syzkaller", 0) = 5 [pid 513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 509] <... write resumed>) = 20699119 [pid 504] <... write resumed>) = 20699119 [pid 504] munmap(0x7f753e237000, 138412032 [pid 509] munmap(0x7f753e237000, 138412032) = 0 [pid 504] <... munmap resumed>) = 0 [pid 504] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 504] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 504] close(5) = 0 [pid 504] close(6 [pid 509] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 509] ioctl(6, LOOP_SET_FD, 5 [pid 504] <... close resumed>) = 0 [pid 504] mkdir("./file4", 0777) = 0 [pid 504] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 509] <... ioctl resumed>) = 0 [ 29.670393][ T498] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 29.685058][ T504] loop0: detected capacity change from 0 to 40427 [ 29.685242][ T498] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 29.712498][ T509] loop1: detected capacity change from 0 to 40427 [pid 509] close(5) = 0 [ 29.719285][ T504] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 29.726953][ T498] F2FS-fs (loop4): fault_injection options not supported [ 29.740272][ T504] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 29.758836][ T498] F2FS-fs (loop4): fault_type options not supported [pid 509] close(6 [pid 513] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 509] <... close resumed>) = 0 [pid 509] mkdir("./file4", 0777 [pid 298] <... umount2 resumed>) = 0 [pid 509] <... mkdir resumed>) = 0 [pid 298] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 509] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 298] newfstatat(AT_FDCWD, "./6/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./6/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./6/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./6") = 0 [pid 298] mkdir("./7", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 520 [ 29.765658][ T504] F2FS-fs (loop0): fault_injection options not supported [ 29.774176][ T498] F2FS-fs (loop4): invalid crc value [ 29.779474][ T504] F2FS-fs (loop0): fault_type options not supported [ 29.787622][ T504] F2FS-fs (loop0): invalid crc value [ 29.795629][ T498] F2FS-fs (loop4): Found nat_bits in checkpoint [ 29.803003][ T504] F2FS-fs (loop0): Found nat_bits in checkpoint [ 29.813494][ T509] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) ./strace-static-x86_64: Process 520 attached [pid 520] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 520] chdir("./7") = 0 [pid 520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 520] setpgid(0, 0) = 0 [pid 520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 520] write(3, "1000", 4) = 4 [pid 520] close(3) = 0 [pid 520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 520] write(1, "executing program\n", 18executing program ) = 18 [pid 520] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 520] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 520] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[521]}, 88) = 521 [pid 520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 521 attached [pid 521] set_robust_list(0x7f75466579a0, 24) = 0 [pid 521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 521] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 521] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... socket resumed>) = 3 [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 520] <... futex resumed>) = 0 [pid 521] <... bpf resumed>) = 4 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 520] <... futex resumed>) = 0 [pid 521] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] memfd_create("syzkaller", 0) = 5 [pid 520] <... futex resumed>) = 0 [pid 521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [ 29.840058][ T509] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 29.869150][ T509] F2FS-fs (loop1): fault_injection options not supported [ 29.876880][ T509] F2FS-fs (loop1): fault_type options not supported [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 513] <... write resumed>) = 20699119 [pid 513] munmap(0x7f753e237000, 138412032) = 0 [pid 513] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 513] ioctl(6, LOOP_SET_FD, 5 [pid 504] <... mount resumed>) = 0 [pid 504] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 504] chdir("./file4") = 0 [pid 504] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 504] ioctl(6, LOOP_CLR_FD) = 0 [pid 504] close(6) = 0 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] fspick(AT_FDCWD, ".", 0) = 7 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 513] <... ioctl resumed>) = 0 [ 29.910336][ T509] F2FS-fs (loop1): invalid crc value [ 29.914315][ T498] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 29.923084][ T504] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 29.930104][ T504] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 29.937715][ T498] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 29.945441][ T513] loop2: detected capacity change from 0 to 40427 [ 29.947615][ T504] F2FS-fs (loop0): switch discard_unit option is not allowed [pid 513] close(5 [pid 498] <... mount resumed>) = 0 [pid 498] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 498] chdir("./file4") = 0 [pid 498] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 498] ioctl(6, LOOP_CLR_FD) = 0 [pid 498] close(6 [pid 513] <... close resumed>) = 0 [pid 513] close(6 [pid 498] <... close resumed>) = 0 [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 504] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 497] <... futex resumed>) = 0 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] sendfile(6, 6, NULL, 281483568746501 [pid 498] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 498] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 504] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 504] <... sendto resumed>) = 36 [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] recvfrom(3, [pid 498] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 498] fspick(AT_FDCWD, ".", 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... fspick resumed>) = 7 [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 498] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=503}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 504] <... futex resumed>) = 1 [pid 504] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 504] <... futex resumed>) = 1 [pid 504] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 504] <... futex resumed>) = 1 [pid 504] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 504] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] exit_group(0) = ? [pid 504] <... futex resumed>) = ? [pid 504] +++ exited with 0 +++ [pid 503] +++ exited with 0 +++ [pid 498] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 0 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=503, si_uid=0, si_status=0, si_utime=3, si_stime=16} --- [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 497] <... futex resumed>) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... sendto resumed>) = 36 [pid 498] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=497}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = 0 [pid 498] <... futex resumed>) = 0 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 295] <... restart_syscall resumed>) = 0 [pid 498] <... futex resumed>) = 0 [pid 295] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 498] <... futex resumed>) = 1 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 0 [pid 295] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] <... openat resumed>) = 3 [pid 497] <... futex resumed>) = 0 [pid 295] newfstatat(3, "", [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 498] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 295] getdents64(3, [pid 498] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 497] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 497] <... futex resumed>) = 0 [pid 498] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 497] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./6/binderfs", [pid 498] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 498] <... futex resumed>) = 1 [pid 498] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 0 [pid 295] unlink("./6/binderfs" [pid 497] exit_group(0 [pid 513] <... close resumed>) = 0 [pid 497] <... exit_group resumed>) = ? [pid 295] <... unlink resumed>) = 0 [pid 498] <... futex resumed>) = ? [pid 513] mkdir("./file4", 0777 [pid 498] +++ exited with 0 +++ [pid 497] +++ exited with 0 +++ [pid 295] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 513] <... mkdir resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=497, si_uid=0, si_status=0, si_utime=7, si_stime=20} --- [pid 513] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./6/binderfs") = 0 [ 29.959932][ T509] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.976006][ T498] F2FS-fs (loop4): switch discard_unit option is not allowed [pid 299] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW [ 30.043647][ T513] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 30.060757][ T513] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 30.068937][ T513] F2FS-fs (loop2): fault_injection options not supported [pid 521] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119) = 20699119 [pid 521] munmap(0x7f753e237000, 138412032) = 0 [pid 521] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 521] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 521] close(5) = 0 [pid 521] close(6) = 0 [pid 521] mkdir("./file4", 0777) = 0 [ 30.099684][ T513] F2FS-fs (loop2): fault_type options not supported [ 30.114240][ T513] F2FS-fs (loop2): invalid crc value [ 30.119644][ T509] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.124132][ T521] loop3: detected capacity change from 0 to 40427 [ 30.127143][ T509] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 521] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 509] <... mount resumed>) = 0 [pid 509] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 509] chdir("./file4") = 0 [pid 509] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 509] ioctl(6, LOOP_CLR_FD) = 0 [pid 509] close(6) = 0 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 509] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... open resumed>) = 6 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 509] fspick(AT_FDCWD, ".", 0 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... fspick resumed>) = 7 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 509] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 30.160048][ T521] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 30.166822][ T521] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.185573][ T513] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.190487][ T521] F2FS-fs (loop3): fault_injection options not supported [ 30.198657][ T521] F2FS-fs (loop3): fault_type options not supported [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = 0 [pid 295] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./6/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./6/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4 [pid 509] <... futex resumed>) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 509] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... open resumed>) = 8 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 509] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 295] <... close resumed>) = 0 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 509] sendfile(6, 6, NULL, 281483568746501 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] rmdir("./6/file4" [pid 509] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 509] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... sendto resumed>) = 36 [pid 509] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=505}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 505] <... futex resumed>) = 0 [pid 509] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 0 [pid 505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 509] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 509] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 505] <... futex resumed>) = 1 [pid 509] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 509] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 505] <... futex resumed>) = 0 [pid 509] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 505] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 509] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 505] exit_group(0 [pid 509] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 (errno 18446744073709551414) [pid 505] <... exit_group resumed>) = ? [pid 509] +++ exited with 0 +++ [pid 295] <... rmdir resumed>) = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 505] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=505, si_uid=0, si_status=0, si_utime=3, si_stime=20} --- [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 295] rmdir("./6") = 0 [pid 295] mkdir("./7", 0777 [pid 296] <... restart_syscall resumed>) = 0 [pid 296] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./6/binderfs") = 0 [pid 296] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 30.216052][ T509] F2FS-fs (loop1): switch discard_unit option is not allowed [ 30.230589][ T521] F2FS-fs (loop3): invalid crc value [ 30.254945][ T521] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 295] close(3 [pid 299] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./6/file4", [pid 295] <... close resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 536 [pid 299] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 513] <... mount resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 513] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 299] openat(AT_FDCWD, "./6/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 513] <... openat resumed>) = 5 [pid 299] <... openat resumed>) = 4 [pid 513] chdir("./file4" [pid 299] newfstatat(4, "", ./strace-static-x86_64: Process 536 attached [pid 513] <... chdir resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 513] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 299] getdents64(4, [pid 536] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 513] <... openat resumed>) = 6 [pid 513] ioctl(6, LOOP_CLR_FD [pid 299] getdents64(4, [pid 513] <... ioctl resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 513] close(6 [pid 299] close(4 [pid 536] chdir("./7" [pid 299] <... close resumed>) = 0 [pid 513] <... close resumed>) = 0 [pid 299] rmdir("./6/file4" [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... chdir resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 513] <... futex resumed>) = 1 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 512] <... futex resumed>) = 0 [pid 299] getdents64(3, [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 513] <... open resumed>) = 6 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 513] <... futex resumed>) = 1 [pid 512] <... futex resumed>) = 0 [pid 299] close(3 [pid 513] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 536] <... prctl resumed>) = 0 [pid 513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 512] <... futex resumed>) = 0 [pid 299] rmdir("./6" [pid 536] setpgid(0, 0 [pid 513] fspick(AT_FDCWD, ".", 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 536] <... setpgid resumed>) = 0 [pid 513] <... fspick resumed>) = 7 [pid 299] <... rmdir resumed>) = 0 [pid 536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] mkdir("./7", 0777 [pid 536] <... openat resumed>) = 3 [pid 513] <... futex resumed>) = 1 [pid 536] write(3, "1000", 4) = 4 [pid 513] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] <... futex resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 536] close(3 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 536] <... close resumed>) = 0 [pid 513] <... futex resumed>) = 0 [pid 512] <... futex resumed>) = 1 [pid 299] <... openat resumed>) = 3 [pid 513] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 536] symlink("/dev/binderfs", "./binderfs" [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 536] <... symlink resumed>) = 0 executing program [pid 536] write(1, "executing program\n", 18) = 18 [pid 536] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 536] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[537]}, 88) = 537 [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 537 attached [pid 513] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 299] ioctl(3, LOOP_CLR_FD [pid 537] set_robust_list(0x7f75466579a0, 24 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 537] <... set_robust_list resumed>) = 0 [pid 513] <... futex resumed>) = 1 [pid 512] <... futex resumed>) = 0 [pid 537] rt_sigprocmask(SIG_SETMASK, [], [pid 513] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 537] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 513] <... open resumed>) = 8 [pid 512] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 537] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... futex resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] <... futex resumed>) = 1 [pid 513] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] <... futex resumed>) = 0 [pid 537] bpf(BPF_MAP_CREATE, NULL, 0 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 536] <... futex resumed>) = 0 [pid 513] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 512] <... futex resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x55558ce1a690) = 538 [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 513] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 536] <... futex resumed>) = 0 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] sendfile(6, 6, NULL, 281483568746501 [pid 512] <... futex resumed>) = 0 [pid 537] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 1 [pid 536] <... futex resumed>) = 0 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 536] <... futex resumed>) = 0 [pid 513] <... futex resumed>) = 1 [pid 512] <... futex resumed>) = 0 [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 538 attached [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 513] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] set_robust_list(0x55558ce1a6a0, 24 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... set_robust_list resumed>) = 0 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] <... futex resumed>) = 0 [pid 513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 512] <... futex resumed>) = 0 [pid 538] chdir("./7" [pid 537] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] <... chdir resumed>) = 0 [pid 537] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 513] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... prctl resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 536] <... futex resumed>) = 0 [pid 513] <... sendto resumed>) = 36 [pid 538] setpgid(0, 0 [pid 537] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... setpgid resumed>) = 0 [pid 536] <... futex resumed>) = 0 [pid 513] recvfrom(3, [pid 537] <... socket resumed>) = 3 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=512}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 537] <... futex resumed>) = 1 [pid 536] <... futex resumed>) = 0 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... openat resumed>) = 3 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... futex resumed>) = 1 [pid 538] write(3, "1000", 4 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] <... futex resumed>) = 0 [pid 512] <... futex resumed>) = 0 [pid 513] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] <... write resumed>) = 4 [pid 537] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] close(3 [pid 537] <... bpf resumed>) = 4 [pid 513] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 512] <... futex resumed>) = 0 [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... close resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 536] <... futex resumed>) = 0 [pid 513] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] symlink("/dev/binderfs", "./binderfs" [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... symlink resumed>) = 0 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] <... futex resumed>) = 0 executing program [pid 513] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] write(1, "executing program\n", 18 [pid 537] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 512] <... futex resumed>) = 0 [pid 538] <... write resumed>) = 18 [pid 537] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 513] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 538] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 536] <... futex resumed>) = 0 [pid 513] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 537] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 538] <... rt_sigaction resumed>NULL, 8) = 0 [pid 537] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 536] <... futex resumed>) = 0 [pid 513] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 538] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 513] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 1 [pid 538] <... mmap resumed>) = 0x7f7546637000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] <... futex resumed>) = 0 [pid 513] <... futex resumed>) = 0 [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 538] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 537] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] <... mprotect resumed>) = 0 [pid 537] <... sendmsg resumed>) = 20 [pid 513] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 538] rt_sigprocmask(SIG_BLOCK, ~[], [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 538] <... rt_sigprocmask resumed>[], 8) = 0 [pid 537] <... futex resumed>) = 1 [pid 536] <... futex resumed>) = 0 [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 513] <... futex resumed>) = 1 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 512] <... futex resumed>) = 0 [pid 538] <... clone3 resumed> => {parent_tid=[540]}, 88) = 540 [pid 537] memfd_create("syzkaller", 0 [pid 513] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] rt_sigprocmask(SIG_SETMASK, [], [pid 537] <... memfd_create resumed>) = 5 [pid 513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 512] <... futex resumed>) = 0 [pid 538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 513] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 512] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... mmap resumed>) = 0x7f753e237000 [pid 513] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 538] <... futex resumed>) = 0 ./strace-static-x86_64: Process 540 attached [pid 540] set_robust_list(0x7f75466579a0, 24) = 0 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 513] <... futex resumed>) = 1 [pid 512] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] exit_group(0 [pid 538] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 540] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [ 30.276195][ T513] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 30.283136][ T513] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.303722][ T513] F2FS-fs (loop2): switch discard_unit option is not allowed [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 512] <... exit_group resumed>) = ? [pid 513] <... futex resumed>) = ? [pid 513] +++ exited with 0 +++ [pid 512] +++ exited with 0 +++ [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=512, si_uid=0, si_status=0, si_utime=8, si_stime=20} --- [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 538] <... futex resumed>) = 1 [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 297] <... restart_syscall resumed>) = 0 [pid 540] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 538] <... futex resumed>) = 0 [pid 297] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 538] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 540] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... openat resumed>) = 3 [pid 540] <... futex resumed>) = 0 [pid 297] newfstatat(3, "", [pid 540] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./7/binderfs" [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... unlink resumed>) = 0 [pid 297] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 538] <... futex resumed>) = 1 [pid 521] <... mount resumed>) = 0 [pid 521] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 540] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] chdir("./file4" [pid 540] <... futex resumed>) = 1 [pid 538] <... futex resumed>) = 0 [pid 540] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 538] <... futex resumed>) = 0 [pid 540] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 538] <... futex resumed>) = 0 [pid 540] <... socket resumed>) = 3 [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 0 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 540] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... chdir resumed>) = 0 [pid 521] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 540] <... bpf resumed>) = 4 [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 538] <... futex resumed>) = 0 [pid 540] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 540] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... openat resumed>) = 6 [pid 540] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] ioctl(6, LOOP_CLR_FD [pid 540] <... futex resumed>) = 1 [pid 538] <... futex resumed>) = 0 [pid 540] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 540] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 521] <... ioctl resumed>) = 0 [pid 540] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 521] close(6 [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 538] <... futex resumed>) = 0 [pid 540] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 540] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... sendmsg resumed>) = 20 [pid 521] <... close resumed>) = 0 [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = 0 [pid 540] <... futex resumed>) = 1 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 540] memfd_create("syzkaller", 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 520] <... futex resumed>) = 1 [pid 521] <... futex resumed>) = 0 [pid 521] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 540] <... memfd_create resumed>) = 5 [pid 521] <... open resumed>) = 6 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... mmap resumed>) = 0x7f753e237000 [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] fspick(AT_FDCWD, ".", 0) = 7 [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [ 30.349867][ T521] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.362136][ T521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 521] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] sendfile(6, 6, NULL, 281483568746501 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... sendto resumed>) = 36 [pid 521] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=520}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 520] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 520] <... futex resumed>) = 1 [pid 521] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 520] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 521] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 521] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 520] exit_group(0 [pid 521] <... futex resumed>) = ? [pid 520] <... exit_group resumed>) = ? [pid 521] +++ exited with 0 +++ [pid 520] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=520, si_uid=0, si_status=0, si_utime=3, si_stime=17} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./7/binderfs") = 0 [ 30.404558][ T521] F2FS-fs (loop3): switch discard_unit option is not allowed [pid 298] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./6/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./6/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./6/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./6/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./6") = 0 [pid 296] mkdir("./7", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 541 [pid 540] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 541 attached [pid 541] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 541] chdir("./7") = 0 [pid 541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 541] setpgid(0, 0) = 0 [pid 541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 541] write(3, "1000", 4) = 4 [pid 541] close(3) = 0 [pid 541] symlink("/dev/binderfs", "./binderfs") = 0 [pid 541] write(1, "executing program\n", 18executing program ) = 18 [pid 541] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 541] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 541] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 541] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[542]}, 88) = 542 [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 542 attached [pid 537] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 542] set_robust_list(0x7f75466579a0, 24) = 0 [pid 542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 542] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = 1 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] bpf(BPF_MAP_CREATE, NULL, 0 [pid 541] <... futex resumed>) = 0 [pid 542] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 541] <... futex resumed>) = 0 [pid 542] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 541] <... futex resumed>) = 0 [pid 542] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 542] <... futex resumed>) = 1 [pid 542] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 542] <... futex resumed>) = 1 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 541] <... futex resumed>) = 0 [pid 542] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] <... futex resumed>) = 0 [pid 542] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 542] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 541] <... futex resumed>) = 0 [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] memfd_create("syzkaller", 0 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 542] <... memfd_create resumed>) = 5 [pid 542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./7/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./7/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./7/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./7") = 0 [pid 297] mkdir("./8", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 543 ./strace-static-x86_64: Process 543 attached [pid 543] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 543] chdir("./8") = 0 [pid 543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 543] setpgid(0, 0) = 0 [pid 543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 543] write(3, "1000", 4) = 4 [pid 543] close(3) = 0 [pid 543] symlink("/dev/binderfs", "./binderfs") = 0 [pid 543] write(1, "executing program\n", 18executing program ) = 18 [pid 543] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 543] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 543] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 543] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[544]}, 88) = 544 [pid 543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x7f75466579a0, 24) = 0 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = 1 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 543] <... futex resumed>) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] <... futex resumed>) = 0 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 543] <... futex resumed>) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = 1 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = 1 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = 1 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 543] <... futex resumed>) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... socket resumed>) = 3 [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = 0 [pid 544] <... futex resumed>) = 1 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... bpf resumed>) = 4 [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 543] <... futex resumed>) = 0 [pid 544] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 544] <... futex resumed>) = 0 [pid 543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] <... sendmsg resumed>) = 20 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] <... futex resumed>) = 0 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 544] memfd_create("syzkaller", 0) = 5 [pid 544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./7/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./7/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./7/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./7") = 0 [pid 298] mkdir("./8", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 545 ./strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 545] chdir("./8") = 0 [pid 545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 545] setpgid(0, 0) = 0 [pid 545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 545] write(3, "1000", 4) = 4 [pid 545] close(3) = 0 [pid 545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 545] write(1, "executing program\n", 18executing program ) = 18 [pid 545] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 545] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[546]}, 88) = 546 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 546 attached [pid 546] set_robust_list(0x7f75466579a0, 24) = 0 [pid 546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 546] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = 1 [pid 546] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = 1 [pid 546] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = 1 [pid 546] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = 1 [pid 546] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 545] <... futex resumed>) = 0 [pid 546] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = 1 [pid 546] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 546] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... bpf resumed>) = 4 [pid 545] <... futex resumed>) = 0 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 545] <... futex resumed>) = 0 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 545] <... futex resumed>) = 0 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 546] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] <... futex resumed>) = 0 [pid 546] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... sendmsg resumed>) = 20 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 546] memfd_create("syzkaller", 0) = 5 [pid 546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 542] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 540] <... write resumed>) = 20699119 [pid 537] <... write resumed>) = 20699119 [pid 540] munmap(0x7f753e237000, 138412032) = 0 [pid 540] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 540] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 537] munmap(0x7f753e237000, 138412032 [pid 540] close(5 [pid 537] <... munmap resumed>) = 0 [pid 540] <... close resumed>) = 0 [pid 540] close(6 [pid 537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 537] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 537] close(5) = 0 [pid 537] close(6 [pid 540] <... close resumed>) = 0 [pid 540] mkdir("./file4", 0777) = 0 [ 30.770555][ T540] loop4: detected capacity change from 0 to 40427 [ 30.798860][ T537] loop0: detected capacity change from 0 to 40427 [pid 540] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 537] <... close resumed>) = 0 [pid 537] mkdir("./file4", 0777) = 0 [pid 537] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [ 30.842317][ T540] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 30.849295][ T540] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 30.861796][ T537] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 30.879366][ T537] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 544] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 30.887776][ T540] F2FS-fs (loop4): fault_injection options not supported [ 30.895364][ T537] F2FS-fs (loop0): fault_injection options not supported [ 30.910093][ T540] F2FS-fs (loop4): fault_type options not supported [ 30.920277][ T537] F2FS-fs (loop0): fault_type options not supported [pid 546] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 542] <... write resumed>) = 20699119 [pid 542] munmap(0x7f753e237000, 138412032) = 0 [pid 542] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 542] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 542] close(5) = 0 [pid 542] close(6) = 0 [pid 542] mkdir("./file4", 0777) = 0 [ 30.938594][ T537] F2FS-fs (loop0): invalid crc value [ 30.947953][ T540] F2FS-fs (loop4): invalid crc value [ 30.955036][ T542] loop1: detected capacity change from 0 to 40427 [ 30.962852][ T537] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.972026][ T540] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.981177][ T542] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 30.987961][ T542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 542] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 544] <... write resumed>) = 20699119 [pid 544] munmap(0x7f753e237000, 138412032) = 0 [pid 544] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 544] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 544] close(5) = 0 [ 31.038090][ T542] F2FS-fs (loop1): fault_injection options not supported [ 31.043350][ T544] loop2: detected capacity change from 0 to 40427 [ 31.051550][ T542] F2FS-fs (loop1): fault_type options not supported [ 31.070167][ T540] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 31.070197][ T542] F2FS-fs (loop1): invalid crc value [pid 544] close(6 [pid 546] <... write resumed>) = 20699119 [pid 546] munmap(0x7f753e237000, 138412032) = 0 [pid 544] <... close resumed>) = 0 [pid 540] <... mount resumed>) = 0 [pid 544] mkdir("./file4", 0777) = 0 [pid 544] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 540] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 540] chdir("./file4") = 0 [pid 540] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 540] ioctl(6, LOOP_CLR_FD) = 0 [pid 540] close(6) = 0 [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] fspick(AT_FDCWD, ".", 0) = 7 [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 546] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 546] ioctl(6, LOOP_SET_FD, 5 [pid 540] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 540] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=538}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 540] <... futex resumed>) = 1 [pid 540] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 540] <... futex resumed>) = 1 [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 540] <... futex resumed>) = 1 [pid 540] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 540] <... futex resumed>) = 1 [pid 540] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 540] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] exit_group(0) = ? [pid 540] <... futex resumed>) = ? [pid 540] +++ exited with 0 +++ [pid 538] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=538, si_uid=0, si_status=0, si_utime=6, si_stime=14} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 546] <... ioctl resumed>) = 0 [pid 546] close(5) = 0 [pid 546] close(6 [pid 537] <... mount resumed>) = 0 [pid 537] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 537] chdir("./file4") = 0 [pid 537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 537] ioctl(6, LOOP_CLR_FD) = 0 [pid 537] close(6) = 0 [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./7/binderfs") = 0 [ 31.082284][ T540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 31.090964][ T537] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.095378][ T540] F2FS-fs (loop4): switch discard_unit option is not allowed [ 31.097849][ T537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.106166][ T546] loop3: detected capacity change from 0 to 40427 [ 31.121106][ T542] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 299] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 537] <... open resumed>) = 6 [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] fspick(AT_FDCWD, ".", 0) = 7 [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 537] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 536] <... futex resumed>) = 0 [pid 546] <... close resumed>) = 0 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] mkdir("./file4", 0777) = 0 [pid 546] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 537] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... open resumed>) = 8 [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 537] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 537] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 537] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [ 31.140421][ T544] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 31.150930][ T537] F2FS-fs (loop0): switch discard_unit option is not allowed [ 31.161947][ T544] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 31.169998][ T544] F2FS-fs (loop2): fault_injection options not supported [ 31.180662][ T544] F2FS-fs (loop2): fault_type options not supported [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... sendto resumed>) = 36 [pid 537] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=536}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 537] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 536] <... futex resumed>) = 0 [pid 537] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 0 [pid 537] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 537] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] <... futex resumed>) = 0 [pid 537] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 536] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 537] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 537] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 537] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] exit_group(0) = ? [pid 537] <... futex resumed>) = 231 [pid 537] +++ exited with 0 +++ [pid 536] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=536, si_uid=0, si_status=0, si_utime=7, si_stime=19} --- [pid 295] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 295] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 31.196360][ T544] F2FS-fs (loop2): invalid crc value [ 31.203059][ T546] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 31.218240][ T546] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 31.218556][ T544] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.232939][ T546] F2FS-fs (loop3): fault_injection options not supported [pid 295] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./7/binderfs" [pid 542] <... mount resumed>) = 0 [pid 542] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 542] chdir("./file4") = 0 [pid 542] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 542] ioctl(6, LOOP_CLR_FD) = 0 [pid 542] close(6) = 0 [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] fspick(AT_FDCWD, ".", 0) = 7 [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 295] <... unlink resumed>) = 0 [pid 295] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 542] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 542] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=541}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 542] <... futex resumed>) = 1 [pid 542] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 542] <... futex resumed>) = 1 [pid 542] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 542] <... futex resumed>) = 1 [pid 542] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 542] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] exit_group(0) = ? [pid 542] <... futex resumed>) = ? [pid 542] +++ exited with 0 +++ [pid 541] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=541, si_uid=0, si_status=0, si_utime=3, si_stime=23} --- [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 296] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 31.240310][ T546] F2FS-fs (loop3): fault_type options not supported [ 31.247755][ T542] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.256679][ T542] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.266754][ T542] F2FS-fs (loop1): switch discard_unit option is not allowed [ 31.274243][ T546] F2FS-fs (loop3): invalid crc value [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./7/binderfs") = 0 [ 31.302736][ T546] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 296] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 544] <... mount resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./7/file4", [pid 544] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 544] <... openat resumed>) = 5 [pid 544] chdir("./file4" [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./7/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 544] <... chdir resumed>) = 0 [pid 299] <... openat resumed>) = 4 [pid 544] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 544] ioctl(6, LOOP_CLR_FD [pid 299] getdents64(4, [pid 544] <... ioctl resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 544] close(6 [pid 299] getdents64(4, [pid 544] <... close resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(4 [pid 544] <... futex resumed>) = 1 [pid 299] <... close resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] <... futex resumed>) = 0 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] rmdir("./7/file4" [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... rmdir resumed>) = 0 [pid 544] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 299] getdents64(3, [pid 544] <... open resumed>) = 6 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(3 [pid 544] <... futex resumed>) = 1 [pid 299] <... close resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] <... futex resumed>) = 0 [pid 299] rmdir("./7" [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... rmdir resumed>) = 0 [pid 544] fspick(AT_FDCWD, ".", 0 [pid 299] mkdir("./8", 0777 [pid 544] <... fspick resumed>) = 7 [pid 299] <... mkdir resumed>) = 0 [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 544] <... futex resumed>) = 1 [pid 543] <... futex resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 543] <... futex resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 567 ./strace-static-x86_64: Process 567 attached [pid 567] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 567] chdir("./8") = 0 [pid 567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 567] setpgid(0, 0) = 0 [pid 567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 567] write(3, "1000", 4) = 4 [pid 567] close(3) = 0 [pid 567] symlink("/dev/binderfs", "./binderfs") = 0 [pid 567] write(1, "executing program\n", 18executing program ) = 18 [pid 567] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 567] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 567] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 567] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[569]}, 88) = 569 [pid 567] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 569 attached [pid 569] set_robust_list(0x7f75466579a0, 24) = 0 [pid 569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 569] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 1 [pid 569] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [ 31.364825][ T544] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 31.376120][ T544] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 31.399056][ T544] F2FS-fs (loop2): switch discard_unit option is not allowed [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 543] <... futex resumed>) = 1 [pid 544] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 543] <... futex resumed>) = 1 [pid 544] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] sendfile(6, 6, NULL, 281483568746501 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 1 [pid 544] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 543] <... futex resumed>) = 0 [pid 544] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... sendto resumed>) = 36 [pid 544] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=543}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 543] <... futex resumed>) = 0 [pid 544] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 543] <... futex resumed>) = 0 [pid 544] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 544] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 544] <... futex resumed>) = 0 [pid 543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 543] <... futex resumed>) = 0 [pid 544] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 544] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 543] <... futex resumed>) = 0 [pid 544] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 543] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 544] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 544] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] exit_group(0 [pid 544] <... futex resumed>) = ? [pid 543] <... exit_group resumed>) = ? [pid 544] +++ exited with 0 +++ [pid 543] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=543, si_uid=0, si_status=0, si_utime=5, si_stime=23} --- [pid 569] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 569] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 569] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 567] <... futex resumed>) = 0 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 0 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 567] <... futex resumed>) = 0 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 0 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 567] <... futex resumed>) = 0 [pid 297] <... restart_syscall resumed>) = 0 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 0 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 569] <... socket resumed>) = 3 [pid 567] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 569] <... futex resumed>) = 0 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... openat resumed>) = 3 [pid 569] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] newfstatat(3, "", [pid 569] <... bpf resumed>) = 4 [pid 567] <... futex resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] getdents64(3, [pid 569] <... futex resumed>) = 0 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] <... umount2 resumed>) = 0 [pid 569] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 569] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 567] <... futex resumed>) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] newfstatat(AT_FDCWD, "./8/binderfs", [pid 569] <... futex resumed>) = 0 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 569] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] unlink("./8/binderfs" [pid 569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 567] <... futex resumed>) = 0 [pid 297] <... unlink resumed>) = 0 [pid 569] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 297] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 569] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 569] <... futex resumed>) = 1 [pid 567] <... futex resumed>) = 0 [pid 569] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 567] <... futex resumed>) = 0 [pid 569] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... sendmsg resumed>) = 20 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 569] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 567] <... futex resumed>) = 0 [pid 569] memfd_create("syzkaller", 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 569] <... memfd_create resumed>) = 5 [pid 569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./7/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./7/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 546] <... mount resumed>) = 0 [pid 295] <... openat resumed>) = 4 [pid 546] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 295] newfstatat(4, "", [pid 546] <... openat resumed>) = 5 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 546] chdir("./file4" [pid 295] getdents64(4, [pid 546] <... chdir resumed>) = 0 [pid 546] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 295] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4 [pid 546] <... openat resumed>) = 6 [pid 295] <... close resumed>) = 0 [pid 546] ioctl(6, LOOP_CLR_FD [pid 295] rmdir("./7/file4" [pid 546] <... ioctl resumed>) = 0 [pid 546] close(6) = 0 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... rmdir resumed>) = 0 [pid 545] <... futex resumed>) = 1 [pid 546] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] getdents64(3, [pid 546] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] close(3 [pid 546] <... futex resumed>) = 1 [pid 545] <... futex resumed>) = 0 [pid 295] <... close resumed>) = 0 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] rmdir("./7" [pid 545] <... futex resumed>) = 0 [pid 546] fspick(AT_FDCWD, ".", 0) = 7 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] mkdir("./8", 0777 [pid 545] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 31.430707][ T546] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 31.454649][ T546] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 546] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] <... futex resumed>) = 1 [pid 295] <... clone resumed>, child_tidptr=0x55558ce1a690) = 570 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 546] sendfile(6, 6, NULL, 281483568746501 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 546] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... sendto resumed>) = 36 [pid 546] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=545}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 546] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 546] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = 0 [pid 545] <... futex resumed>) = 0 [pid 546] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 546] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 545] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 546] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 546] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] <... futex resumed>) = 0 [pid 545] exit_group(0) = ? [pid 546] +++ exited with 0 +++ ./strace-static-x86_64: Process 570 attached [pid 570] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 570] chdir("./8") = 0 [pid 570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 545] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=545, si_uid=0, si_status=0, si_utime=5, si_stime=18} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 570] setpgid(0, 0) = 0 [pid 570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 570] write(3, "1000", 4) = 4 [pid 570] close(3) = 0 executing program [pid 570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 570] write(1, "executing program\n", 18) = 18 [pid 570] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 570] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[571]}, 88) = 571 [pid 570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./8/binderfs") = 0 [pid 298] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 571 attached [pid 571] set_robust_list(0x7f75466579a0, 24) = 0 [pid 571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 571] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 571] <... futex resumed>) = 1 [pid 571] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] memfd_create("syzkaller", 0) = 5 [pid 571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [ 31.489289][ T546] F2FS-fs (loop3): switch discard_unit option is not allowed [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./7/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./7/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./7/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./7/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./7") = 0 [pid 296] mkdir("./8", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 572 ./strace-static-x86_64: Process 572 attached [pid 572] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 572] chdir("./8") = 0 [pid 572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 572] setpgid(0, 0) = 0 [pid 572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 572] write(3, "1000", 4) = 4 [pid 572] close(3) = 0 [pid 572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 572] write(1, "executing program\n", 18executing program ) = 18 [pid 572] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 572] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 572] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 572] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 572] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[573]}, 88) = 573 ./strace-static-x86_64: Process 573 attached [pid 573] set_robust_list(0x7f75466579a0, 24) = 0 [pid 573] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 573] <... futex resumed>) = 0 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 572] <... futex resumed>) = 0 [pid 573] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... socket resumed>) = 3 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... bpf resumed>) = 4 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... futex resumed>) = 0 [pid 573] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 573] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] memfd_create("syzkaller", 0 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... memfd_create resumed>) = 5 [pid 572] <... futex resumed>) = 0 [pid 573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 573] <... mmap resumed>) = 0x7f753e237000 [pid 569] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./8/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./8/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./8/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./8") = 0 [pid 297] mkdir("./9", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 574 ./strace-static-x86_64: Process 574 attached [pid 574] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 574] chdir("./9" [pid 571] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 574] <... chdir resumed>) = 0 [pid 574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 574] setpgid(0, 0) = 0 [pid 574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 574] write(3, "1000", 4) = 4 [pid 574] close(3) = 0 [pid 574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 574] write(1, "executing program\n", 18executing program ) = 18 [pid 574] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 574] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 574] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[575]}, 88) = 575 [pid 574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 575 attached [pid 575] set_robust_list(0x7f75466579a0, 24) = 0 [pid 575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 575] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 575] bpf(BPF_MAP_CREATE, NULL, 0 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 574] <... futex resumed>) = 0 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 575] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 0 [pid 575] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 575] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 575] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... socket resumed>) = 3 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... bpf resumed>) = 4 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 575] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 574] <... futex resumed>) = 0 [pid 575] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 575] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... sendmsg resumed>) = 20 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 575] memfd_create("syzkaller", 0) = 5 [pid 575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./8/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./8/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./8/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./8") = 0 [pid 298] mkdir("./9", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 576 ./strace-static-x86_64: Process 576 attached [pid 576] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 576] chdir("./9") = 0 [pid 576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 576] setpgid(0, 0) = 0 [pid 576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 576] write(3, "1000", 4) = 4 [pid 576] close(3) = 0 [pid 576] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 576] write(1, "executing program\n", 18) = 18 [pid 576] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 576] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 576] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[577]}, 88) = 577 [pid 576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 577 attached [pid 577] set_robust_list(0x7f75466579a0, 24) = 0 [pid 577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 577] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 577] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 1 [pid 577] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 576] <... futex resumed>) = 0 [pid 577] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... sendmsg resumed>) = 20 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 577] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 577] memfd_create("syzkaller", 0) = 5 [pid 577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 573] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 569] <... write resumed>) = 20699119 [pid 569] munmap(0x7f753e237000, 138412032) = 0 [pid 569] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 569] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 569] close(5) = 0 [pid 569] close(6 [pid 575] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 571] <... write resumed>) = 20699119 [pid 571] munmap(0x7f753e237000, 138412032) = 0 [pid 571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [ 31.878545][ T569] loop4: detected capacity change from 0 to 40427 [pid 571] ioctl(6, LOOP_SET_FD, 5 [pid 569] <... close resumed>) = 0 [pid 569] mkdir("./file4", 0777) = 0 [pid 569] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 571] <... ioctl resumed>) = 0 [pid 571] close(5) = 0 [pid 571] close(6 [ 31.929689][ T571] loop0: detected capacity change from 0 to 40427 [pid 577] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 571] <... close resumed>) = 0 [pid 571] mkdir("./file4", 0777) = 0 [ 31.980314][ T569] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 31.990072][ T569] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.009013][ T569] F2FS-fs (loop4): fault_injection options not supported [ 32.021968][ T569] F2FS-fs (loop4): fault_type options not supported [pid 571] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 575] <... write resumed>) = 20699119 [pid 575] munmap(0x7f753e237000, 138412032) = 0 [pid 575] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 575] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 575] close(5) = 0 [pid 575] close(6 [pid 573] <... write resumed>) = 20699119 [pid 573] munmap(0x7f753e237000, 138412032) = 0 [pid 573] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 573] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 573] close(5) = 0 [ 32.031974][ T575] loop2: detected capacity change from 0 to 40427 [ 32.038233][ T571] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 32.045885][ T569] F2FS-fs (loop4): invalid crc value [ 32.055944][ T571] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.058176][ T573] loop1: detected capacity change from 0 to 40427 [ 32.070733][ T571] F2FS-fs (loop0): fault_injection options not supported [pid 573] close(6 [pid 575] <... close resumed>) = 0 [pid 575] mkdir("./file4", 0777) = 0 [pid 575] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 573] <... close resumed>) = 0 [pid 573] mkdir("./file4", 0777) = 0 [ 32.077965][ T571] F2FS-fs (loop0): fault_type options not supported [ 32.089134][ T575] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 32.097282][ T569] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.098100][ T571] F2FS-fs (loop0): invalid crc value [ 32.106736][ T575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 573] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 577] <... write resumed>) = 20699119 [pid 577] munmap(0x7f753e237000, 138412032) = 0 [pid 577] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [ 32.128115][ T575] F2FS-fs (loop2): fault_injection options not supported [ 32.128973][ T571] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.140215][ T575] F2FS-fs (loop2): fault_type options not supported [ 32.148352][ T573] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 32.158802][ T573] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 32.169948][ T577] loop3: detected capacity change from 0 to 40427 [pid 577] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 577] close(5) = 0 [pid 577] close(6) = 0 [pid 577] mkdir("./file4", 0777) = 0 [ 32.177001][ T573] F2FS-fs (loop1): fault_injection options not supported [ 32.188646][ T575] F2FS-fs (loop2): invalid crc value [ 32.195889][ T577] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 32.203245][ T573] F2FS-fs (loop1): fault_type options not supported [ 32.210661][ T577] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 32.214470][ T575] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.218692][ T577] F2FS-fs (loop3): fault_injection options not supported [pid 577] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 569] <... mount resumed>) = 0 [pid 569] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 569] chdir("./file4") = 0 [pid 569] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 569] ioctl(6, LOOP_CLR_FD) = 0 [pid 569] close(6) = 0 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [ 32.233666][ T577] F2FS-fs (loop3): fault_type options not supported [ 32.233956][ T569] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 32.247491][ T573] F2FS-fs (loop1): invalid crc value [ 32.253122][ T577] F2FS-fs (loop3): invalid crc value [ 32.257684][ T569] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] fspick(AT_FDCWD, ".", 0) = 7 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 569] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 569] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... open resumed>) = 8 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 569] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=567}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 569] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 569] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 567] <... futex resumed>) = 0 [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = 0 [pid 567] <... futex resumed>) = 1 [pid 569] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 569] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] <... futex resumed>) = 0 [pid 569] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 567] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 567] <... futex resumed>) = 0 [pid 569] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 569] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 567] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 569] <... futex resumed>) = 0 [pid 569] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 567] exit_group(0 [pid 569] <... futex resumed>) = ? [pid 567] <... exit_group resumed>) = ? [pid 569] +++ exited with 0 +++ [pid 567] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=567, si_uid=0, si_status=0, si_utime=4, si_stime=22} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./8/binderfs") = 0 [pid 299] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 571] <... mount resumed>) = 0 [pid 571] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 571] chdir("./file4") = 0 [pid 571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 571] ioctl(6, LOOP_CLR_FD) = 0 [pid 571] close(6) = 0 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [pid 571] fspick(AT_FDCWD, ".", 0) = 7 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 1 [ 32.279504][ T577] F2FS-fs (loop3): Found nat_bits in checkpoint [ 32.279669][ T573] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.292670][ T571] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 32.299978][ T569] F2FS-fs (loop4): switch discard_unit option is not allowed [ 32.307314][ T571] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 571] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 EINVAL (Invalid argument) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [ 32.345607][ T571] F2FS-fs (loop0): switch discard_unit option is not allowed [ 32.372677][ T575] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 32.373219][ T573] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 32.387298][ T573] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 573] <... mount resumed>) = 0 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 571] <... futex resumed>) = 1 [pid 570] <... futex resumed>) = 0 [pid 573] <... openat resumed>) = 5 [pid 571] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] chdir("./file4" [pid 571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... chdir resumed>) = 0 [pid 571] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 573] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 571] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 573] ioctl(6, LOOP_CLR_FD [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... ioctl resumed>) = 0 [pid 573] close(6 [pid 571] <... futex resumed>) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] sendfile(6, 6, NULL, 281483568746501 [pid 573] <... close resumed>) = 0 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 575] <... mount resumed>) = 0 [pid 575] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 575] chdir("./file4") = 0 [pid 575] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 575] ioctl(6, LOOP_CLR_FD) = 0 [pid 575] close(6 [pid 573] <... futex resumed>) = 1 [pid 572] <... futex resumed>) = 0 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... close resumed>) = 0 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 575] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] <... futex resumed>) = 0 [pid 573] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] <... futex resumed>) = 1 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 573] <... open resumed>) = 6 [pid 572] <... futex resumed>) = 0 [pid 571] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] <... futex resumed>) = 1 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 573] <... futex resumed>) = 0 [pid 571] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 573] fspick(AT_FDCWD, ".", 0 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] <... sendto resumed>) = 36 [pid 573] <... fspick resumed>) = 7 [pid 572] <... futex resumed>) = 0 [pid 571] recvfrom(3, [pid 575] <... futex resumed>) = 0 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=570}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 573] <... futex resumed>) = 0 [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 575] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... futex resumed>) = 0 [pid 571] <... futex resumed>) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 575] <... open resumed>) = 6 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 575] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] <... mount resumed>) = 0 [pid 577] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 577] chdir("./file4") = 0 [pid 577] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 577] ioctl(6, LOOP_CLR_FD) = 0 [pid 577] close(6) = 0 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] fspick(AT_FDCWD, ".", 0) = 7 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 574] <... futex resumed>) = 0 [pid 573] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 571] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 1 [pid 571] <... futex resumed>) = 1 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 575] <... futex resumed>) = 0 [pid 570] <... futex resumed>) = 0 [ 32.391675][ T575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.403687][ T577] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 32.419419][ T577] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 32.431931][ T573] F2FS-fs (loop1): switch discard_unit option is not allowed [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 575] fspick(AT_FDCWD, ".", 0 [pid 573] <... futex resumed>) = 1 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... fspick resumed>) = 7 [pid 570] <... futex resumed>) = 1 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 575] <... futex resumed>) = 1 [pid 575] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] <... futex resumed>) = 1 [pid 577] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 574] <... futex resumed>) = 0 [pid 572] <... futex resumed>) = 0 [pid 571] <... futex resumed>) = 0 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... open resumed>) = 8 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 571] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 572] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 1 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 0 [pid 575] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 577] <... futex resumed>) = 1 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 571] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 573] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 573] <... futex resumed>) = 1 [pid 573] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 1 [pid 573] sendfile(6, 6, NULL, 281483568746501 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 577] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 1 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 570] <... futex resumed>) = 0 [pid 577] <... sendto resumed>) = 36 [pid 577] recvfrom(3, [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] <... futex resumed>) = 0 [pid 570] <... futex resumed>) = 1 [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 571] <... futex resumed>) = 0 [pid 570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 571] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 570] <... futex resumed>) = 0 [pid 571] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 571] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 571] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] <... futex resumed>) = 0 [pid 577] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=576}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 575] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 573] <... futex resumed>) = 1 [pid 570] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 571] <... futex resumed>) = 0 [pid 570] <... futex resumed>) = 1 [pid 571] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 570] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 571] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 571] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 571] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] exit_group(0 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... futex resumed>) = 1 [pid 571] <... futex resumed>) = ? [pid 570] <... exit_group resumed>) = ? [pid 571] +++ exited with 0 +++ [pid 577] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 577] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 575] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 0 [pid 573] <... sendto resumed>) = 36 [pid 570] +++ exited with 0 +++ [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=570, si_uid=0, si_status=0, si_utime=6, si_stime=23} --- [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 573] recvfrom(3, [pid 577] <... futex resumed>) = 1 [pid 576] <... futex resumed>) = 0 [pid 575] <... open resumed>) = 8 [pid 573] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=572}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 576] <... futex resumed>) = 0 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 577] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 575] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 1 [pid 572] <... futex resumed>) = 0 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 1 [pid 575] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 573] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 577] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] <... futex resumed>) = 0 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 573] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 572] <... futex resumed>) = 0 [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 575] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 0 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] sendfile(6, 6, NULL, 281483568746501 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 1 [pid 572] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = 1 [pid 576] <... futex resumed>) = 0 [pid 575] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... futex resumed>) = 0 [pid 577] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 576] <... futex resumed>) = 0 [pid 575] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 0 [pid 573] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 575] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 577] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 575] <... sendto resumed>) = 36 [pid 574] <... futex resumed>) = 0 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] recvfrom(3, [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 1 [pid 572] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 575] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=574}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 576] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... futex resumed>) = 0 [pid 577] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 575] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 0 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 295] <... restart_syscall resumed>) = 0 [pid 577] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 1 [pid 576] <... futex resumed>) = 0 [pid 575] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 574] <... futex resumed>) = 0 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] exit_group(0 [pid 575] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] <... futex resumed>) = 0 [pid 577] <... futex resumed>) = ? [pid 576] <... exit_group resumed>) = ? [pid 575] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 573] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 295] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 577] +++ exited with 0 +++ [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 575] <... futex resumed>) = 1 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 573] <... futex resumed>) = 0 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] +++ exited with 0 +++ [pid 574] <... futex resumed>) = 0 [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 1 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=576, si_uid=0, si_status=0, si_utime=2, si_stime=24} --- [pid 573] <... futex resumed>) = 0 [pid 572] <... futex resumed>) = 1 [pid 295] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 575] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 573] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 572] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 295] <... openat resumed>) = 3 [pid 575] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 573] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] newfstatat(3, "", [pid 575] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 1 [pid 572] <... futex resumed>) = 0 [pid 575] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 575] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 574] <... futex resumed>) = 0 [pid 572] exit_group(0 [pid 295] getdents64(3, [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 573] <... futex resumed>) = ? [pid 572] <... exit_group resumed>) = ? [pid 575] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 573] +++ exited with 0 +++ [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 575] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] +++ exited with 0 +++ [pid 295] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 575] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 1 [pid 575] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=572, si_uid=0, si_status=0, si_utime=7, si_stime=18} --- [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 575] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 295] newfstatat(AT_FDCWD, "./8/binderfs", [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 575] <... futex resumed>) = 1 [pid 574] <... futex resumed>) = 0 [pid 295] unlink("./8/binderfs" [pid 575] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 575] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 574] <... futex resumed>) = 0 [pid 295] <... unlink resumed>) = 0 [pid 575] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 574] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 295] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 575] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 575] <... futex resumed>) = 0 [pid 575] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] exit_group(0 [pid 575] <... futex resumed>) = ? [pid 574] <... exit_group resumed>) = ? [pid 575] +++ exited with 0 +++ [pid 298] <... restart_syscall resumed>) = 0 [pid 296] <... restart_syscall resumed>) = 0 [pid 574] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=574, si_uid=0, si_status=0, si_utime=6, si_stime=20} --- [pid 298] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... openat resumed>) = 3 [pid 296] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] newfstatat(3, "", [pid 297] <... openat resumed>) = 3 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... openat resumed>) = 3 [pid 297] newfstatat(3, "", [pid 298] getdents64(3, [pid 296] newfstatat(3, "", [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] getdents64(3, [pid 296] getdents64(3, [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] newfstatat(AT_FDCWD, "./9/binderfs", [pid 297] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 32.437767][ T577] F2FS-fs (loop3): switch discard_unit option is not allowed [ 32.448696][ T575] F2FS-fs (loop2): switch discard_unit option is not allowed [pid 296] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] unlink("./9/binderfs" [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... unlink resumed>) = 0 [pid 296] newfstatat(AT_FDCWD, "./8/binderfs", [pid 298] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] newfstatat(AT_FDCWD, "./9/binderfs", [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./8/binderfs" [pid 297] unlink("./9/binderfs" [pid 296] <... unlink resumed>) = 0 [pid 297] <... unlink resumed>) = 0 [pid 296] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./8/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./8/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./8/file4") = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./8") = 0 [pid 299] mkdir("./9", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 599 ./strace-static-x86_64: Process 599 attached [pid 599] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 599] chdir("./9") = 0 [pid 599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 599] setpgid(0, 0) = 0 executing program [pid 599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 599] write(3, "1000", 4) = 4 [pid 599] close(3) = 0 [pid 599] symlink("/dev/binderfs", "./binderfs") = 0 [pid 599] write(1, "executing program\n", 18) = 18 [pid 599] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 599] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 599] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 599] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 599] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[600]}, 88) = 600 [pid 599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 600 attached [pid 600] set_robust_list(0x7f75466579a0, 24) = 0 [pid 600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 600] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 600] <... futex resumed>) = 1 [pid 600] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] memfd_create("syzkaller", 0) = 5 [pid 600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 295] <... umount2 resumed>) = 0 [pid 295] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./8/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./8/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./8/file4") = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./8") = 0 [pid 295] mkdir("./9", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 601 ./strace-static-x86_64: Process 601 attached [pid 601] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 601] chdir("./9") = 0 [pid 601] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 601] setpgid(0, 0) = 0 [pid 601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 601] write(3, "1000", 4) = 4 [pid 601] close(3) = 0 [pid 601] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 601] write(1, "executing program\n", 18) = 18 [pid 601] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 601] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 601] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 601] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 601] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 601] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[602]}, 88) = 602 [pid 601] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./9/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 602 attached [pid 298] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./9/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 602] set_robust_list(0x7f75466579a0, 24 [pid 298] <... openat resumed>) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 602] <... set_robust_list resumed>) = 0 [pid 298] getdents64(4, [pid 602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 602] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 602] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] close(4) = 0 [pid 298] rmdir("./9/file4" [pid 602] <... futex resumed>) = 1 [pid 601] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(3, [pid 601] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 602] bpf(BPF_MAP_CREATE, NULL, 0 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] close(3 [pid 602] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... close resumed>) = 0 [pid 298] rmdir("./9" [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... rmdir resumed>) = 0 [pid 298] mkdir("./10", 0777 [pid 602] <... futex resumed>) = 1 [pid 601] <... futex resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 601] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] ioctl(3, LOOP_CLR_FD [pid 602] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 298] close(3 [pid 602] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 298] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] <... futex resumed>) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... clone resumed>, child_tidptr=0x55558ce1a690) = 603 [pid 601] <... futex resumed>) = 1 [pid 602] <... futex resumed>) = 0 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 602] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 601] <... futex resumed>) = 0 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... futex resumed>) = 0 [pid 601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 602] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 602] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... socket resumed>) = 3 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 602] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... bpf resumed>) = 4 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 296] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 603 attached [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] set_robust_list(0x55558ce1a6a0, 24 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 296] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 603] <... set_robust_list resumed>) = 0 [pid 602] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] chdir("./10" [pid 602] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 603] <... chdir resumed>) = 0 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 602] <... futex resumed>) = 1 [pid 601] <... futex resumed>) = 0 [pid 296] newfstatat(AT_FDCWD, "./8/file4", [pid 603] <... prctl resumed>) = 0 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] setpgid(0, 0 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 603] <... setpgid resumed>) = 0 [pid 602] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 296] umount2("./8/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 602] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 603] <... openat resumed>) = 3 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 603] write(3, "1000", 4 [pid 602] <... futex resumed>) = 1 [pid 601] <... futex resumed>) = 0 [pid 296] openat(AT_FDCWD, "./8/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 603] <... write resumed>) = 4 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] close(3 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 296] <... openat resumed>) = 4 [pid 603] <... close resumed>) = 0 [pid 602] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] newfstatat(4, "", [pid 603] symlink("/dev/binderfs", "./binderfs" [pid 602] <... sendmsg resumed>) = 20 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 603] <... symlink resumed>) = 0 [pid 602] <... futex resumed>) = 1 executing program [pid 601] <... futex resumed>) = 0 [pid 603] write(1, "executing program\n", 18 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] getdents64(4, [pid 603] <... write resumed>) = 18 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 603] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] memfd_create("syzkaller", 0 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 296] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 603] <... futex resumed>) = 0 [pid 602] <... memfd_create resumed>) = 5 [pid 296] getdents64(4, [pid 603] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 296] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 603] <... rt_sigaction resumed>NULL, 8) = 0 [pid 602] <... mmap resumed>) = 0x7f753e237000 [pid 297] <... umount2 resumed>) = 0 [pid 296] close(4 [pid 603] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 296] <... close resumed>) = 0 [pid 603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 600] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 297] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] rmdir("./8/file4" [pid 603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... rmdir resumed>) = 0 [pid 603] <... mmap resumed>) = 0x7f7546637000 [pid 297] newfstatat(AT_FDCWD, "./9/file4", [pid 296] getdents64(3, [pid 603] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 603] <... mprotect resumed>) = 0 [pid 297] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] close(3 [pid 603] rt_sigprocmask(SIG_BLOCK, ~[], [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... close resumed>) = 0 [pid 603] <... rt_sigprocmask resumed>[], 8) = 0 [pid 297] openat(AT_FDCWD, "./9/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] rmdir("./8" [pid 603] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 297] <... openat resumed>) = 4 [pid 296] <... rmdir resumed>) = 0 [pid 297] newfstatat(4, "", [pid 296] mkdir("./9", 0777 [pid 603] <... clone3 resumed> => {parent_tid=[604]}, 88) = 604 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 603] rt_sigprocmask(SIG_SETMASK, [], [pid 297] getdents64(4, [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] <... openat resumed>) = 3 [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(4, [pid 296] ioctl(3, LOOP_CLR_FD [pid 603] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(4 [pid 296] close(3 [pid 297] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 297] rmdir("./9/file4" [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... rmdir resumed>) = 0 [pid 297] getdents64(3, [pid 296] <... clone resumed>, child_tidptr=0x55558ce1a690) = 605 [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 ./strace-static-x86_64: Process 604 attached ./strace-static-x86_64: Process 605 attached [pid 297] rmdir("./9" [pid 604] set_robust_list(0x7f75466579a0, 24 [pid 297] <... rmdir resumed>) = 0 [pid 605] set_robust_list(0x55558ce1a6a0, 24 [pid 604] <... set_robust_list resumed>) = 0 [pid 297] mkdir("./10", 0777 [pid 605] <... set_robust_list resumed>) = 0 [pid 604] rt_sigprocmask(SIG_SETMASK, [], [pid 297] <... mkdir resumed>) = 0 [pid 605] chdir("./9" [pid 604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 605] <... chdir resumed>) = 0 [pid 604] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 605] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 604] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 605] <... prctl resumed>) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] setpgid(0, 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 297] <... openat resumed>) = 3 [pid 605] <... setpgid resumed>) = 0 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] ioctl(3, LOOP_CLR_FD [pid 605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 605] <... openat resumed>) = 3 [pid 604] bpf(BPF_MAP_CREATE, NULL, 0 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] close(3 [pid 605] write(3, "1000", 4 [pid 604] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 297] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 606 [pid 605] <... write resumed>) = 4 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] close(3 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 605] <... close resumed>) = 0 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] symlink("/dev/binderfs", "./binderfs" [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 executing program [pid 605] <... symlink resumed>) = 0 [pid 604] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] write(1, "executing program\n", 18 [pid 604] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 605] <... write resumed>) = 18 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 605] <... rt_sigaction resumed>NULL, 8) = 0 [pid 604] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 604] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 605] <... mmap resumed>) = 0x7f7546637000 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 605] <... mprotect resumed>) = 0 [pid 604] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] rt_sigprocmask(SIG_BLOCK, ~[], [pid 604] <... bpf resumed>) = -1 EFAULT (Bad address) ./strace-static-x86_64: Process 606 attached [pid 605] <... rt_sigprocmask resumed>[], 8) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 606] set_robust_list(0x55558ce1a6a0, 24 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 606] <... set_robust_list resumed>) = 0 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... clone3 resumed> => {parent_tid=[607]}, 88) = 607 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 606] chdir("./10" [pid 605] rt_sigprocmask(SIG_SETMASK, [], [pid 604] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... chdir resumed>) = 0 [pid 605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 604] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... prctl resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] setpgid(0, 0 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 606] <... setpgid resumed>) = 0 [pid 604] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 604] <... socket resumed>) = 3 [pid 606] <... openat resumed>) = 3 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] write(3, "1000", 4 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 606] <... write resumed>) = 4 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] close(3 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 606] <... close resumed>) = 0 [pid 604] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 607 attached [pid 606] symlink("/dev/binderfs", "./binderfs" [pid 604] <... bpf resumed>) = 4 [pid 607] set_robust_list(0x7f75466579a0, 24 [pid 606] <... symlink resumed>) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 607] <... set_robust_list resumed>) = 0 [pid 606] write(1, "executing program\n", 18 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 607] rt_sigprocmask(SIG_SETMASK, [], [pid 606] <... write resumed>) = 18 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 606] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 607] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 606] <... futex resumed>) = 0 [pid 604] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 606] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 604] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... rt_sigaction resumed>NULL, 8) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = 1 [pid 606] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 605] <... futex resumed>) = 0 [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] bpf(BPF_MAP_CREATE, NULL, 0 [pid 606] <... mmap resumed>) = 0x7f7546637000 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 607] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 606] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 604] <... futex resumed>) = 0 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... mprotect resumed>) = 0 [pid 604] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 607] <... futex resumed>) = 1 [pid 605] <... futex resumed>) = 0 [pid 607] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 606] rt_sigprocmask(SIG_BLOCK, ~[], [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 607] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 606] <... rt_sigprocmask resumed>[], 8) = 0 [pid 605] <... futex resumed>) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] <... clone3 resumed> => {parent_tid=[608]}, 88) = 608 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] rt_sigprocmask(SIG_SETMASK, [], [pid 605] <... futex resumed>) = 0 [pid 604] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] <... sendmsg resumed>) = 20 [pid 607] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = 1 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... futex resumed>) = 0 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] <... futex resumed>) = 0 [pid 607] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] memfd_create("syzkaller", 0 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 608 attached [pid 607] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 604] <... memfd_create resumed>) = 5 [pid 608] set_robust_list(0x7f75466579a0, 24 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 608] <... set_robust_list resumed>) = 0 [pid 607] <... futex resumed>) = 1 [pid 605] <... futex resumed>) = 0 [pid 608] rt_sigprocmask(SIG_SETMASK, [], [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... mmap resumed>) = 0x7f753e237000 [pid 608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] <... futex resumed>) = 0 [pid 607] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 605] <... futex resumed>) = 0 [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 608] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 605] <... futex resumed>) = 0 [pid 608] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 607] <... socket resumed>) = 3 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] <... futex resumed>) = 1 [pid 607] <... futex resumed>) = 0 [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 608] bpf(BPF_MAP_CREATE, NULL, 0 [pid 607] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 607] <... bpf resumed>) = 4 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 1 [pid 607] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 608] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 607] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 607] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] <... futex resumed>) = 1 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] <... futex resumed>) = 0 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... futex resumed>) = 0 [pid 608] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 607] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 608] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 608] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] <... futex resumed>) = 0 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 608] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... sendmsg resumed>) = 20 [pid 608] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 606] <... futex resumed>) = 0 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = 1 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = 0 [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 608] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 607] memfd_create("syzkaller", 0 [pid 606] <... futex resumed>) = 0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 608] <... socket resumed>) = 3 [pid 607] <... memfd_create resumed>) = 5 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 608] <... futex resumed>) = 0 [pid 607] <... mmap resumed>) = 0x7f753e237000 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 606] <... futex resumed>) = 0 [pid 608] <... bpf resumed>) = 4 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 608] <... futex resumed>) = 0 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 606] <... futex resumed>) = 0 [pid 608] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 608] <... futex resumed>) = 0 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 606] <... futex resumed>) = 0 [pid 608] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 608] <... futex resumed>) = 0 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 606] <... futex resumed>) = 0 [pid 608] <... sendmsg resumed>) = 20 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 608] memfd_create("syzkaller", 0 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 608] <... memfd_create resumed>) = 5 [pid 608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 602] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 600] <... write resumed>) = 20699119 [pid 600] munmap(0x7f753e237000, 138412032) = 0 [pid 600] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 600] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 600] close(5) = 0 [pid 600] close(6) = 0 [pid 600] mkdir("./file4", 0777) = 0 [pid 600] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [ 32.887106][ T600] loop4: detected capacity change from 0 to 40427 [pid 604] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 607] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 602] <... write resumed>) = 20699119 [ 32.970317][ T600] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 32.977515][ T600] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 608] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 602] munmap(0x7f753e237000, 138412032) = 0 [pid 602] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 602] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 602] close(5) = 0 [ 33.017841][ T600] F2FS-fs (loop4): fault_injection options not supported [ 33.040102][ T600] F2FS-fs (loop4): fault_type options not supported [ 33.049628][ T602] loop0: detected capacity change from 0 to 40427 [ 33.056068][ T600] F2FS-fs (loop4): invalid crc value [pid 602] close(6) = 0 [pid 602] mkdir("./file4", 0777) = 0 [pid 602] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 604] <... write resumed>) = 20699119 [pid 604] munmap(0x7f753e237000, 138412032) = 0 [pid 604] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [ 33.091127][ T600] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 604] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 604] close(5) = 0 [pid 604] close(6 [pid 607] <... write resumed>) = 20699119 [pid 607] munmap(0x7f753e237000, 138412032) = 0 [pid 607] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 607] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 608] <... write resumed>) = 20699119 [ 33.136287][ T604] loop3: detected capacity change from 0 to 40427 [ 33.153638][ T602] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 33.166462][ T602] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 33.176637][ T607] loop1: detected capacity change from 0 to 40427 [pid 608] munmap(0x7f753e237000, 138412032) = 0 [pid 608] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 604] <... close resumed>) = 0 [pid 604] mkdir("./file4", 0777) = 0 [pid 604] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 608] ioctl(6, LOOP_SET_FD, 5 [pid 607] close(5 [pid 608] <... ioctl resumed>) = 0 [pid 608] close(5) = 0 [pid 608] close(6 [pid 607] <... close resumed>) = 0 [pid 607] close(6 [pid 600] <... mount resumed>) = 0 [pid 600] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 600] chdir("./file4") = 0 [pid 600] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 600] ioctl(6, LOOP_CLR_FD) = 0 [pid 600] close(6) = 0 [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [ 33.184453][ T602] F2FS-fs (loop0): fault_injection options not supported [ 33.192274][ T608] loop2: detected capacity change from 0 to 40427 [ 33.192437][ T602] F2FS-fs (loop0): fault_type options not supported [ 33.202543][ T600] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 33.206501][ T602] F2FS-fs (loop0): invalid crc value [ 33.212541][ T600] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.219951][ T602] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 600] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] fspick(AT_FDCWD, ".", 0) = 7 [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 608] <... close resumed>) = 0 [pid 607] <... close resumed>) = 0 [pid 608] mkdir("./file4", 0777 [pid 607] mkdir("./file4", 0777 [pid 608] <... mkdir resumed>) = 0 [pid 607] <... mkdir resumed>) = 0 [pid 608] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 607] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 600] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [ 33.234197][ T604] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 33.246886][ T600] F2FS-fs (loop4): switch discard_unit option is not allowed [ 33.256404][ T608] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 33.263301][ T604] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 33.263407][ T607] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [pid 600] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [ 33.286967][ T600] handle_bad_sector: 56 callbacks suppressed [ 33.286985][ T600] attempt to access beyond end of device [ 33.286985][ T600] loop4: rw=2049, want=53256, limit=40427 [ 33.296075][ T608] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 33.305309][ T604] F2FS-fs (loop3): fault_injection options not supported [ 33.317622][ T607] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 33.319475][ T604] F2FS-fs (loop3): fault_type options not supported [pid 600] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 600] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=599}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 600] <... futex resumed>) = 1 [pid 600] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 600] <... futex resumed>) = 1 [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 600] <... futex resumed>) = 1 [pid 600] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 599] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 600] <... futex resumed>) = 1 [pid 600] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 600] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 599] <... futex resumed>) = 0 [pid 599] exit_group(0) = ? [pid 600] <... futex resumed>) = ? [pid 600] +++ exited with 0 +++ [pid 599] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=599, si_uid=0, si_status=0, si_utime=2, si_stime=27} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./9/binderfs") = 0 [pid 299] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 602] <... mount resumed>) = 0 [pid 602] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 602] chdir("./file4") = 0 [pid 602] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 602] ioctl(6, LOOP_CLR_FD) = 0 [ 33.330729][ T602] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.336426][ T600] attempt to access beyond end of device [ 33.336426][ T600] loop4: rw=0, want=53256, limit=40427 [ 33.339928][ T602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.358145][ T607] F2FS-fs (loop1): fault_injection options not supported [ 33.365199][ T604] F2FS-fs (loop3): invalid crc value [ 33.365213][ T608] F2FS-fs (loop2): fault_injection options not supported [ 33.377267][ T607] F2FS-fs (loop1): fault_type options not supported [pid 602] close(6) = 0 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] <... futex resumed>) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 601] <... futex resumed>) = 1 [pid 602] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... open resumed>) = 6 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] fspick(AT_FDCWD, ".", 0 [pid 601] <... futex resumed>) = 0 [pid 602] <... fspick resumed>) = 7 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [ 33.383782][ T299] attempt to access beyond end of device [ 33.383782][ T299] loop4: rw=2049, want=45104, limit=40427 [ 33.384990][ T607] F2FS-fs (loop1): invalid crc value [ 33.400706][ T604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.400716][ T608] F2FS-fs (loop2): fault_type options not supported [ 33.401790][ T608] F2FS-fs (loop2): invalid crc value [pid 602] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] <... futex resumed>) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 601] <... futex resumed>) = 1 [pid 602] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... open resumed>) = 8 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] <... futex resumed>) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 601] <... futex resumed>) = 1 [pid 602] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] <... futex resumed>) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... futex resumed>) = 0 [ 33.433271][ T602] F2FS-fs (loop0): switch discard_unit option is not allowed [ 33.450678][ T607] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.457759][ T602] attempt to access beyond end of device [ 33.457759][ T602] loop0: rw=2049, want=53256, limit=40427 [ 33.471282][ T608] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.478943][ T604] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [pid 602] sendfile(6, 6, NULL, 281483568746501 [pid 604] <... mount resumed>) = 0 [pid 602] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 604] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 604] chdir("./file4") = 0 [pid 604] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 604] ioctl(6, LOOP_CLR_FD) = 0 [pid 604] close(6 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 601] <... futex resumed>) = 0 [pid 602] <... sendto resumed>) = 36 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=601}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 602] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 602] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 602] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... close resumed>) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 603] <... futex resumed>) = 0 [pid 602] <... futex resumed>) = 1 [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = 0 [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 602] <... futex resumed>) = 0 [pid 601] <... futex resumed>) = 1 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 602] <... futex resumed>) = 0 [pid 601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 602] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 602] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 601] <... futex resumed>) = 0 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 602] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 601] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 602] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 608] <... mount resumed>) = 0 [pid 602] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 602] <... futex resumed>) = 1 [pid 601] <... futex resumed>) = 0 [pid 608] <... openat resumed>) = 5 [pid 602] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 601] exit_group(0 [pid 608] chdir("./file4" [pid 602] <... futex resumed>) = ? [pid 601] <... exit_group resumed>) = ? [pid 608] <... chdir resumed>) = 0 [pid 602] +++ exited with 0 +++ [pid 608] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 601] +++ exited with 0 +++ [pid 608] <... openat resumed>) = 6 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=601, si_uid=0, si_status=0, si_utime=3, si_stime=23} --- [pid 608] ioctl(6, LOOP_CLR_FD [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 608] <... ioctl resumed>) = 0 [pid 608] close(6) = 0 [pid 295] <... restart_syscall resumed>) = 0 [pid 295] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 608] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 295] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 604] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 295] newfstatat(AT_FDCWD, "./9/binderfs", [pid 608] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 608] <... open resumed>) = 6 [pid 604] <... open resumed>) = 6 [pid 295] unlink("./9/binderfs" [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... unlink resumed>) = 0 [pid 608] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [ 33.487566][ T602] attempt to access beyond end of device [ 33.487566][ T602] loop0: rw=0, want=53256, limit=40427 [ 33.500109][ T604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 33.515885][ T608] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 33.522992][ T608] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 295] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] fspick(AT_FDCWD, ".", 0 [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... fspick resumed>) = 7 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = 1 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 608] fspick(AT_FDCWD, ".", 0 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] <... fspick resumed>) = 7 [pid 603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... futex resumed>) = 1 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] <... futex resumed>) = 0 [pid 604] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 608] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [ 33.562248][ T295] attempt to access beyond end of device [ 33.562248][ T295] loop0: rw=2049, want=45104, limit=40427 [ 33.567175][ T607] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 33.590870][ T608] F2FS-fs (loop2): switch discard_unit option is not allowed [ 33.591611][ T604] F2FS-fs (loop3): switch discard_unit option is not allowed [ 33.603083][ T607] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 607] <... mount resumed>) = 0 [pid 606] <... futex resumed>) = 0 [pid 604] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 607] <... openat resumed>) = 5 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] <... open resumed>) = 8 [pid 607] chdir("./file4" [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = 1 [pid 607] <... chdir resumed>) = 0 [pid 606] <... futex resumed>) = 0 [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 607] <... openat resumed>) = 6 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] <... open resumed>) = 8 [pid 607] ioctl(6, LOOP_CLR_FD [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 607] <... ioctl resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] close(6 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 1 [pid 607] <... close resumed>) = 0 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = 1 [pid 605] <... futex resumed>) = 0 [pid 604] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] <... futex resumed>) = 0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] <... futex resumed>) = 0 [pid 607] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 608] sendfile(6, 6, NULL, 281483568746501 [pid 607] <... open resumed>) = 6 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 605] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] <... futex resumed>) = 0 [pid 608] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 607] fspick(AT_FDCWD, ".", 0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 607] <... fspick resumed>) = 7 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./9/file4", [pid 608] <... futex resumed>) = 1 [pid 607] <... futex resumed>) = 1 [pid 605] <... futex resumed>) = 0 [pid 604] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] <... futex resumed>) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] <... futex resumed>) = 1 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./9/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./9/file4" [pid 603] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 608] <... futex resumed>) = 0 [pid 607] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(3, [pid 608] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] <... futex resumed>) = 1 [pid 608] <... sendto resumed>) = 36 [pid 607] <... futex resumed>) = 1 [pid 605] <... futex resumed>) = 0 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 608] recvfrom(3, [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 608] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=606}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 299] close(3 [pid 608] <... futex resumed>) = 1 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 604] sendfile(6, 6, NULL, 281483568746501 [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 1 [pid 299] <... close resumed>) = 0 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 606] <... futex resumed>) = 1 [ 33.615055][ T608] attempt to access beyond end of device [ 33.615055][ T608] loop2: rw=2049, want=53256, limit=40427 [ 33.630855][ T604] attempt to access beyond end of device [ 33.630855][ T604] loop3: rw=2049, want=53256, limit=40427 [ 33.642958][ T608] attempt to access beyond end of device [ 33.642958][ T608] loop2: rw=0, want=53256, limit=40427 [ 33.655038][ T607] F2FS-fs (loop1): switch discard_unit option is not allowed [pid 299] rmdir("./9" [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... rmdir resumed>) = 0 [pid 299] mkdir("./10", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 608] <... futex resumed>) = 0 [pid 607] <... futex resumed>) = 0 ./strace-static-x86_64: Process 630 attached [pid 608] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 607] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 604] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 299] <... clone resumed>, child_tidptr=0x55558ce1a690) = 630 [pid 630] set_robust_list(0x55558ce1a6a0, 24 [pid 608] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 607] <... open resumed>) = 8 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 1 [pid 607] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 608] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 607] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 630] <... set_robust_list resumed>) = 0 [pid 608] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 607] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 603] <... futex resumed>) = 0 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] <... futex resumed>) = 1 [pid 607] <... futex resumed>) = 1 [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 604] <... sendto resumed>) = 36 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 604] recvfrom(3, [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] sendfile(6, 6, NULL, 281483568746501 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] <... futex resumed>) = 0 [pid 606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=603}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 630] chdir("./10" [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... futex resumed>) = 0 [pid 608] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 607] <... futex resumed>) = 1 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 605] <... futex resumed>) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = 1 [pid 607] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 606] <... futex resumed>) = 0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... chdir resumed>) = 0 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] <... sendto resumed>) = 36 [pid 606] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 603] <... futex resumed>) = 0 [pid 608] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] recvfrom(3, [pid 606] <... futex resumed>) = 0 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 608] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 607] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=605}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 606] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 604] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 630] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 608] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... prctl resumed>) = 0 [pid 608] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... futex resumed>) = 1 [pid 605] <... futex resumed>) = 0 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 1 [pid 607] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 606] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 630] setpgid(0, 0 [pid 608] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 607] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 606] exit_group(0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... setpgid resumed>) = 0 [pid 608] <... futex resumed>) = ? [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] <... exit_group resumed>) = ? [pid 605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 608] +++ exited with 0 +++ [pid 607] <... futex resumed>) = 0 [pid 606] +++ exited with 0 +++ [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 630] <... openat resumed>) = 3 [pid 607] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 605] <... futex resumed>) = 0 [pid 604] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=606, si_uid=0, si_status=0, si_utime=5, si_stime=24} --- [pid 630] write(3, "1000", 4 [pid 607] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 630] <... write resumed>) = 4 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 630] close(3 [pid 607] <... futex resumed>) = 0 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... close resumed>) = 0 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 630] symlink("/dev/binderfs", "./binderfs" [pid 607] <... futex resumed>) = 0 [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 604] <... futex resumed>) = 0 [pid 603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 630] <... symlink resumed>) = 0 [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... restart_syscall resumed>) = 0 [pid 630] write(1, "executing program\n", 18executing program [pid 607] <... futex resumed>) = 0 [pid 605] <... futex resumed>) = 1 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 630] <... write resumed>) = 18 [pid 607] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 604] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 630] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 604] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 297] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 630] <... futex resumed>) = 0 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 630] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 607] <... futex resumed>) = 1 [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 630] <... rt_sigaction resumed>NULL, 8) = 0 [pid 607] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 605] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... openat resumed>) = 3 [pid 630] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 605] <... futex resumed>) = 0 [pid 604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] <... futex resumed>) = 0 [pid 297] newfstatat(3, "", [pid 630] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 607] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 605] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 604] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 603] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 607] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./10/binderfs") = 0 [pid 297] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 630] <... mmap resumed>) = 0x7f7546637000 [pid 607] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 630] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 607] <... futex resumed>) = 1 [pid 605] <... futex resumed>) = 0 [pid 604] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 605] exit_group(0) = ? [pid 630] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 607] +++ exited with 0 +++ [pid 605] +++ exited with 0 +++ [pid 604] <... futex resumed>) = 1 [pid 603] <... futex resumed>) = 0 [pid 630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 604] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 603] exit_group(0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=605, si_uid=0, si_status=0, si_utime=3, si_stime=26} --- [pid 604] <... futex resumed>) = ? [pid 603] <... exit_group resumed>) = ? [pid 630] <... clone3 resumed> => {parent_tid=[631]}, 88) = 631 [pid 604] +++ exited with 0 +++ [pid 603] +++ exited with 0 +++ [pid 630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=603, si_uid=0, si_status=0, si_utime=5, si_stime=25} --- [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 33.664968][ T604] attempt to access beyond end of device [ 33.664968][ T604] loop3: rw=0, want=53256, limit=40427 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 631 attached [pid 298] newfstatat(AT_FDCWD, "./10/binderfs", [pid 631] set_robust_list(0x7f75466579a0, 24 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 631] <... set_robust_list resumed>) = 0 [pid 298] unlink("./10/binderfs") = 0 [pid 631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./9/binderfs") = 0 [pid 296] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 631] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 631] bpf(BPF_MAP_CREATE, NULL, 0 [pid 630] <... futex resumed>) = 0 [pid 631] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = 0 [pid 630] <... futex resumed>) = 1 [pid 631] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 631] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 631] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 630] <... futex resumed>) = 0 [pid 631] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 631] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 630] <... futex resumed>) = 0 [pid 631] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 631] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 630] <... futex resumed>) = 0 [pid 631] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 631] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... socket resumed>) = 3 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = 0 [pid 630] <... futex resumed>) = 1 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 630] <... futex resumed>) = 0 [pid 631] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 631] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 631] memfd_create("syzkaller", 0) = 5 [pid 631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 295] <... umount2 resumed>) = 0 [pid 295] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./9/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./9/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./9/file4") = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./9") = 0 [pid 295] mkdir("./10", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 632 ./strace-static-x86_64: Process 632 attached [pid 632] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 632] chdir("./10") = 0 [pid 632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 632] setpgid(0, 0) = 0 [pid 632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 632] write(3, "1000", 4) = 4 [pid 632] close(3) = 0 [pid 632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 632] write(1, "executing program\n", 18executing program ) = 18 [pid 632] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 632] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 632] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 632] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[633]}, 88) = 633 [pid 632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 633 attached [pid 633] set_robust_list(0x7f75466579a0, 24) = 0 [pid 633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 633] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 633] <... futex resumed>) = 1 [pid 633] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] memfd_create("syzkaller", 0) = 5 [pid 633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./10/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./10/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./10/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./10") = 0 [pid 297] mkdir("./11", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 634 ./strace-static-x86_64: Process 634 attached [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 634] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 634] chdir("./11" [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./9/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 634] <... chdir resumed>) = 0 [pid 296] umount2("./9/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./9/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./9/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./9") = 0 [pid 296] mkdir("./10", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 635 [pid 634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 634] setpgid(0, 0) = 0 [pid 634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 634] write(3, "1000", 4) = 4 [pid 634] close(3) = 0 [pid 634] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 634] write(1, "executing program\n", 18) = 18 [pid 634] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 634] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 634] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 634] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[636]}, 88) = 636 [pid 634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 635 attached [pid 635] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 635] chdir("./10") = 0 [pid 635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 635] setpgid(0, 0) = 0 [pid 635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 635] write(3, "1000", 4) = 4 [pid 635] close(3) = 0 [pid 635] symlink("/dev/binderfs", "./binderfs") = 0 [pid 635] write(1, "executing program\n", 18executing program ) = 18 [pid 635] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 635] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 635] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 635] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 635] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[637]}, 88) = 637 [pid 635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 636 attached [pid 636] set_robust_list(0x7f75466579a0, 24) = 0 ./strace-static-x86_64: Process 637 attached [pid 637] set_robust_list(0x7f75466579a0, 24) = 0 [pid 637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 637] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 631] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 636] bpf(BPF_MAP_CREATE, NULL, 0 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 636] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 634] <... futex resumed>) = 0 [pid 636] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] <... futex resumed>) = 0 [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 634] <... futex resumed>) = 0 [pid 636] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] <... futex resumed>) = 0 [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 634] <... futex resumed>) = 0 [pid 636] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] <... futex resumed>) = 0 [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 634] <... futex resumed>) = 0 [pid 636] <... socket resumed>) = 3 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] <... futex resumed>) = 0 [pid 636] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... bpf resumed>) = 4 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... futex resumed>) = 0 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 636] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 636] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 636] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 636] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... sendmsg resumed>) = 20 [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = 0 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] memfd_create("syzkaller", 0 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 636] <... memfd_create resumed>) = 5 [pid 636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 637] <... futex resumed>) = 1 [pid 637] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = 0 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 1 [pid 637] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] <... futex resumed>) = 0 [pid 637] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... socket resumed>) = 3 [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... bpf resumed>) = 4 [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 637] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 637] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... sendmsg resumed>) = 20 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 637] memfd_create("syzkaller", 0 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 637] <... memfd_create resumed>) = 5 [pid 637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 633] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./10/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./10/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./10/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./10") = 0 [pid 298] mkdir("./11", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 638 ./strace-static-x86_64: Process 638 attached [pid 638] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 638] chdir("./11") = 0 [pid 638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 638] setpgid(0, 0) = 0 [pid 638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 638] write(3, "1000", 4) = 4 [pid 638] close(3) = 0 [pid 638] symlink("/dev/binderfs", "./binderfs") = 0 [pid 638] write(1, "executing program\n", 18executing program ) = 18 [pid 638] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 638] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 638] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 638] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 638] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[639]}, 88) = 639 [pid 638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 639 attached [pid 639] set_robust_list(0x7f75466579a0, 24) = 0 [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 639] bpf(BPF_MAP_CREATE, NULL, 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 639] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 639] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 638] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 639] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 639] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 639] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... bpf resumed>) = 4 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] <... futex resumed>) = 0 [pid 639] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 639] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 638] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] <... futex resumed>) = 0 [pid 639] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... sendmsg resumed>) = 20 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 639] memfd_create("syzkaller", 0) = 5 [pid 639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 631] <... write resumed>) = 20699119 [pid 631] munmap(0x7f753e237000, 138412032) = 0 [pid 631] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 631] ioctl(6, LOOP_SET_FD, 5 [pid 637] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 631] <... ioctl resumed>) = 0 [pid 631] close(5) = 0 [pid 631] close(6 [pid 636] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 631] <... close resumed>) = 0 [pid 631] mkdir("./file4", 0777) = 0 [pid 631] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 633] <... write resumed>) = 20699119 [ 34.159117][ T631] loop4: detected capacity change from 0 to 40427 [pid 639] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 633] munmap(0x7f753e237000, 138412032) = 0 [pid 633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 633] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 633] close(5) = 0 [pid 633] close(6) = 0 [pid 633] mkdir("./file4", 0777) = 0 [ 34.225987][ T633] loop0: detected capacity change from 0 to 40427 [ 34.254511][ T631] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 34.263420][ T631] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 34.282030][ T631] F2FS-fs (loop4): fault_injection options not supported [ 34.299546][ T631] F2FS-fs (loop4): fault_type options not supported [ 34.313561][ T633] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 34.321395][ T633] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 633] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 636] <... write resumed>) = 20699119 [pid 637] <... write resumed>) = 20699119 [pid 637] munmap(0x7f753e237000, 138412032 [pid 636] munmap(0x7f753e237000, 138412032 [pid 637] <... munmap resumed>) = 0 [pid 636] <... munmap resumed>) = 0 [pid 636] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 636] ioctl(6, LOOP_SET_FD, 5 [pid 637] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 637] ioctl(6, LOOP_SET_FD, 5 [pid 636] <... ioctl resumed>) = 0 [pid 636] close(5) = 0 [pid 636] close(6 [pid 637] <... ioctl resumed>) = 0 [pid 637] close(5) = 0 [pid 637] close(6 [pid 636] <... close resumed>) = 0 [pid 636] mkdir("./file4", 0777) = 0 [ 34.329413][ T633] F2FS-fs (loop0): fault_injection options not supported [ 34.337160][ T631] F2FS-fs (loop4): invalid crc value [ 34.348648][ T636] loop2: detected capacity change from 0 to 40427 [ 34.349283][ T637] loop1: detected capacity change from 0 to 40427 [ 34.362449][ T633] F2FS-fs (loop0): fault_type options not supported [ 34.372036][ T633] F2FS-fs (loop0): invalid crc value [pid 636] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 639] <... write resumed>) = 20699119 [pid 639] munmap(0x7f753e237000, 138412032) = 0 [pid 639] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 639] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 639] close(5) = 0 [pid 639] close(6 [pid 637] <... close resumed>) = 0 [pid 637] mkdir("./file4", 0777) = 0 [ 34.379722][ T631] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.387785][ T633] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.394598][ T639] loop3: detected capacity change from 0 to 40427 [ 34.420698][ T636] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [pid 637] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 639] <... close resumed>) = 0 [pid 639] mkdir("./file4", 0777) = 0 [ 34.427830][ T636] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 34.436295][ T636] F2FS-fs (loop2): fault_injection options not supported [ 34.443319][ T636] F2FS-fs (loop2): fault_type options not supported [ 34.443420][ T633] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 34.450869][ T631] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 34.458755][ T639] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 34.463712][ T631] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 639] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 633] <... mount resumed>) = 0 [pid 631] <... mount resumed>) = 0 [pid 631] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 631] chdir("./file4") = 0 [pid 631] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 631] ioctl(6, LOOP_CLR_FD) = 0 [pid 631] close(6) = 0 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 631] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 633] chdir("./file4") = 0 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = 0 [pid 630] <... futex resumed>) = 1 [pid 631] fspick(AT_FDCWD, ".", 0 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... fspick resumed>) = 7 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 631] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 631] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 633] ioctl(6, LOOP_CLR_FD) = 0 [pid 633] close(6) = 0 [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] <... futex resumed>) = 0 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 34.470801][ T633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.484669][ T639] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 34.494275][ T636] F2FS-fs (loop2): invalid crc value [ 34.497040][ T639] F2FS-fs (loop3): fault_injection options not supported [ 34.511409][ T631] F2FS-fs (loop4): switch discard_unit option is not allowed [ 34.515793][ T637] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 34.524559][ T639] F2FS-fs (loop3): fault_type options not supported [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 1 [pid 630] <... futex resumed>) = 1 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 0 [pid 633] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 631] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 633] <... open resumed>) = 6 [pid 631] <... open resumed>) = 8 [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... futex resumed>) = 1 [pid 632] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 1 [pid 630] <... futex resumed>) = 0 [pid 633] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 630] <... futex resumed>) = 0 [pid 633] fspick(AT_FDCWD, ".", 0 [pid 631] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... fspick resumed>) = 7 [pid 631] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... futex resumed>) = 1 [pid 632] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 1 [pid 630] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 632] <... futex resumed>) = 0 [pid 631] sendfile(6, 6, NULL, 281483568746501 [pid 630] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 631] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=630}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 630] <... futex resumed>) = 0 [pid 631] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 630] <... futex resumed>) = 0 [pid 631] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 631] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 34.531069][ T636] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.533619][ T637] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.547046][ T639] F2FS-fs (loop3): invalid crc value [ 34.562050][ T633] F2FS-fs (loop0): switch discard_unit option is not allowed [pid 633] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 0 [pid 630] <... futex resumed>) = 1 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 636] <... mount resumed>) = 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 632] <... futex resumed>) = 1 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 636] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 636] chdir("./file4") = 0 [pid 636] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 636] ioctl(6, LOOP_CLR_FD) = 0 [pid 636] close(6) = 0 [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 633] <... futex resumed>) = 0 [pid 633] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] sendfile(6, 6, NULL, 281483568746501 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... sendto resumed>) = 36 [pid 632] <... futex resumed>) = 0 [pid 633] recvfrom(3, [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=632}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 632] <... futex resumed>) = 0 [pid 631] <... futex resumed>) = 0 [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 0 [pid 632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 633] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 632] <... futex resumed>) = 0 [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 633] <... futex resumed>) = 0 [pid 632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... futex resumed>) = 0 [pid 632] <... futex resumed>) = 0 [pid 633] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... futex resumed>) = 0 [pid 632] <... futex resumed>) = 1 [pid 633] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 633] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] <... futex resumed>) = 0 [pid 633] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 632] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 633] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 633] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] exit_group(0 [pid 633] <... futex resumed>) = ? [pid 632] <... exit_group resumed>) = ? [pid 634] <... futex resumed>) = 0 [pid 633] +++ exited with 0 +++ [pid 632] +++ exited with 0 +++ [pid 631] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=632, si_uid=0, si_status=0, si_utime=4, si_stime=18} --- [pid 295] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./10/binderfs") = 0 [pid 295] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 636] <... futex resumed>) = 0 [pid 634] <... futex resumed>) = 1 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 630] <... futex resumed>) = 0 [pid 636] <... open resumed>) = 6 [pid 631] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 630] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 630] <... futex resumed>) = 0 [pid 636] <... futex resumed>) = 1 [pid 634] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 631] <... futex resumed>) = 0 [pid 630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 631] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] exit_group(0 [pid 636] fspick(AT_FDCWD, ".", 0 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = ? [pid 630] <... exit_group resumed>) = ? [pid 636] <... fspick resumed>) = 7 [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 631] +++ exited with 0 +++ [pid 630] +++ exited with 0 +++ [pid 634] <... futex resumed>) = 0 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=630, si_uid=0, si_status=0, si_utime=3, si_stime=29} --- [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 636] <... futex resumed>) = 0 [ 34.576632][ T636] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.578442][ T637] F2FS-fs (loop1): fault_injection options not supported [ 34.583791][ T636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 34.591541][ T637] F2FS-fs (loop1): fault_type options not supported [ 34.611952][ T639] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.615686][ T637] F2FS-fs (loop1): invalid crc value [pid 634] <... futex resumed>) = 1 [pid 636] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, [pid 636] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./10/binderfs" [pid 636] <... futex resumed>) = 1 [pid 634] <... futex resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 634] <... futex resumed>) = 0 [pid 636] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... open resumed>) = 8 [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 636] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 634] <... futex resumed>) = 1 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 634] <... futex resumed>) = 1 [pid 636] sendfile(6, 6, NULL, 281483568746501 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... sendto resumed>) = 36 [pid 634] <... futex resumed>) = 0 [pid 636] recvfrom(3, [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=634}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 636] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 636] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 636] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 636] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 636] <... futex resumed>) = 0 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 636] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 636] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 634] <... futex resumed>) = 1 [pid 636] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 636] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 636] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] exit_group(0 [pid 636] <... futex resumed>) = ? [pid 634] <... exit_group resumed>) = ? [pid 636] +++ exited with 0 +++ [pid 634] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=634, si_uid=0, si_status=0, si_utime=1, si_stime=21} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./11/binderfs") = 0 [ 34.636642][ T636] F2FS-fs (loop2): switch discard_unit option is not allowed [ 34.674572][ T637] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 297] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 639] <... mount resumed>) = 0 [pid 639] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 639] chdir("./file4") = 0 [pid 639] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 639] ioctl(6, LOOP_CLR_FD) = 0 [pid 639] close(6) = 0 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... open resumed>) = 6 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = 1 [pid 639] fspick(AT_FDCWD, ".", 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... fspick resumed>) = 7 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 34.727658][ T639] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 34.734537][ T639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 639] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = 0 [pid 639] <... futex resumed>) = 1 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] sendfile(6, 6, NULL, 281483568746501 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 638] <... futex resumed>) = 0 [pid 639] <... sendto resumed>) = 36 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=638}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 639] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 638] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... futex resumed>) = 0 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 639] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 639] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 639] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 639] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 639] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 639] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 639] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] exit_group(0) = ? [pid 639] <... futex resumed>) = ? [pid 639] +++ exited with 0 +++ [pid 638] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=638, si_uid=0, si_status=0, si_utime=6, si_stime=23} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 637] <... mount resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./11/binderfs") = 0 [pid 298] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 637] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 637] chdir("./file4") = 0 [pid 637] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 637] ioctl(6, LOOP_CLR_FD) = 0 [pid 637] close(6) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] <... futex resumed>) = 0 [pid 637] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... open resumed>) = 6 [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 637] fspick(AT_FDCWD, ".", 0 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... fspick resumed>) = 7 [ 34.772031][ T639] F2FS-fs (loop3): switch discard_unit option is not allowed [ 34.790486][ T637] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 34.797603][ T637] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] <... futex resumed>) = 0 [pid 637] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = 0 [pid 637] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 297] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 637] <... futex resumed>) = 1 [pid 635] <... futex resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./11/file4", [pid 637] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 637] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 637] <... open resumed>) = 8 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] openat(AT_FDCWD, "./11/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 637] <... futex resumed>) = 1 [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... openat resumed>) = 4 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 297] newfstatat(4, "", [pid 637] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 637] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 297] getdents64(4, [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 635] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = 1 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] getdents64(4, [pid 637] sendfile(6, 6, NULL, 281483568746501 [pid 635] <... futex resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 297] close(4 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 637] <... futex resumed>) = 1 [pid 635] <... futex resumed>) = 0 [pid 297] rmdir("./11/file4" [pid 637] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 635] <... futex resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... sendto resumed>) = 36 [pid 297] getdents64(3, [pid 637] recvfrom(3, [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 637] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=635}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 297] close(3 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 637] <... futex resumed>) = 1 [pid 635] <... futex resumed>) = 0 [pid 297] rmdir("./11" [pid 637] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 637] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 297] <... rmdir resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] mkdir("./12", 0777 [pid 637] <... futex resumed>) = 1 [pid 635] <... futex resumed>) = 0 [pid 637] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 637] <... futex resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 297] <... openat resumed>) = 3 [pid 637] <... futex resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] ioctl(3, LOOP_CLR_FD [pid 637] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] <... futex resumed>) = 0 [pid 637] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 297] close(3 [pid 637] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 637] <... futex resumed>) = 0 [pid 635] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 637] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 635] <... futex resumed>) = 0 ./strace-static-x86_64: Process 661 attached [pid 637] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 635] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 295] <... umount2 resumed>) = 0 [pid 661] set_robust_list(0x55558ce1a6a0, 24 [pid 637] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] <... clone resumed>, child_tidptr=0x55558ce1a690) = 661 [pid 661] <... set_robust_list resumed>) = 0 [pid 637] <... futex resumed>) = 0 [pid 635] exit_group(0 [pid 661] chdir("./12" [pid 635] <... exit_group resumed>) = ? [pid 637] +++ exited with 0 +++ [pid 635] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=635, si_uid=0, si_status=0, si_utime=4, si_stime=22} --- [pid 661] <... chdir resumed>) = 0 [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 661] setpgid(0, 0 [pid 295] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 661] <... setpgid resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] newfstatat(AT_FDCWD, "./10/file4", [pid 661] <... openat resumed>) = 3 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 661] write(3, "1000", 4) = 4 [pid 295] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 661] close(3) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 661] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 661] write(1, "executing program\n", 18 [pid 295] openat(AT_FDCWD, "./10/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 661] <... write resumed>) = 18 [pid 661] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... openat resumed>) = 4 [pid 661] <... futex resumed>) = 0 [pid 661] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 295] newfstatat(4, "", [pid 661] <... rt_sigaction resumed>NULL, 8) = 0 [pid 661] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 295] getdents64(4, [pid 661] <... mmap resumed>) = 0x7f7546637000 [pid 661] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 295] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 661] <... mprotect resumed>) = 0 [pid 661] rt_sigprocmask(SIG_BLOCK, ~[], [pid 296] <... restart_syscall resumed>) = 0 [pid 295] getdents64(4, [pid 661] <... rt_sigprocmask resumed>[], 8) = 0 [pid 295] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 295] close(4 [pid 296] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 661] <... clone3 resumed> => {parent_tid=[662]}, 88) = 662 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... close resumed>) = 0 [pid 661] rt_sigprocmask(SIG_SETMASK, [], [pid 296] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] rmdir("./10/file4" [pid 661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 296] <... openat resumed>) = 3 [pid 296] newfstatat(3, "", [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 661] <... futex resumed>) = 0 [pid 296] getdents64(3, [pid 295] getdents64(3, [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./10/binderfs", [pid 295] close(3 [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./10/binderfs" [pid 295] <... close resumed>) = 0 [pid 296] <... unlink resumed>) = 0 [pid 295] rmdir("./10" [pid 296] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 662 attached [ 34.836697][ T637] F2FS-fs (loop1): switch discard_unit option is not allowed [pid 295] <... rmdir resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 295] mkdir("./11", 0777 [pid 299] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... mkdir resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 299] newfstatat(AT_FDCWD, "./10/file4", [pid 295] <... openat resumed>) = 3 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] ioctl(3, LOOP_CLR_FD [pid 299] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] close(3 [pid 662] set_robust_list(0x7f75466579a0, 24 [pid 299] openat(AT_FDCWD, "./10/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... close resumed>) = 0 [pid 662] <... set_robust_list resumed>) = 0 [pid 299] <... openat resumed>) = 4 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... clone resumed>, child_tidptr=0x55558ce1a690) = 663 [pid 662] rt_sigprocmask(SIG_SETMASK, [], [pid 299] getdents64(4, ./strace-static-x86_64: Process 663 attached [pid 663] set_robust_list(0x55558ce1a6a0, 24 [pid 662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 663] <... set_robust_list resumed>) = 0 [pid 662] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 299] getdents64(4, [pid 662] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 299] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] close(4 [pid 662] <... futex resumed>) = 1 [pid 661] <... futex resumed>) = 0 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... close resumed>) = 0 [pid 663] chdir("./11" [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./10/file4" [pid 662] bpf(BPF_MAP_CREATE, NULL, 0 [pid 661] <... futex resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 663] <... chdir resumed>) = 0 [pid 662] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(3, [pid 663] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 662] <... futex resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... prctl resumed>) = 0 [pid 662] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 661] <... futex resumed>) = 0 [pid 299] close(3 [pid 662] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] setpgid(0, 0 [pid 662] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./10" [pid 663] <... setpgid resumed>) = 0 [pid 662] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 661] <... futex resumed>) = 0 [pid 662] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... rmdir resumed>) = 0 [pid 663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 662] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] mkdir("./11", 0777 [pid 662] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 661] <... futex resumed>) = 0 [pid 663] <... openat resumed>) = 3 [pid 662] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... mkdir resumed>) = 0 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 663] write(3, "1000", 4 [pid 662] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 663] <... write resumed>) = 4 [pid 662] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 661] <... futex resumed>) = 0 [pid 299] ioctl(3, LOOP_CLR_FD [pid 663] close(3 [pid 662] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 663] <... close resumed>) = 0 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) executing program [pid 299] close(3 [pid 663] symlink("/dev/binderfs", "./binderfs" [pid 662] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... close resumed>) = 0 [pid 663] <... symlink resumed>) = 0 [pid 662] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 661] <... futex resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 663] write(1, "executing program\n", 18 [pid 662] <... socket resumed>) = 3 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... write resumed>) = 18 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... clone resumed>, child_tidptr=0x55558ce1a690) = 664 [pid 663] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 662] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 661] <... futex resumed>) = 0 [pid 663] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 662] <... bpf resumed>) = 4 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... rt_sigaction resumed>NULL, 8) = 0 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 662] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 662] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 661] <... futex resumed>) = 0 [pid 663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 662] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... mmap resumed>) = 0x7f7546637000 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 662] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... mprotect resumed>) = 0 [pid 662] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 661] <... futex resumed>) = 0 [pid 663] rt_sigprocmask(SIG_BLOCK, ~[], [pid 662] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 663] <... rt_sigprocmask resumed>[], 8) = 0 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 662] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 661] <... futex resumed>) = 0 [pid 663] <... clone3 resumed> => {parent_tid=[665]}, 88) = 665 [pid 662] <... sendmsg resumed>) = 20 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] rt_sigprocmask(SIG_SETMASK, [], [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 662] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] memfd_create("syzkaller", 0 [pid 661] <... futex resumed>) = 0 [pid 663] <... futex resumed>) = 0 [pid 662] <... memfd_create resumed>) = 5 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 ./strace-static-x86_64: Process 664 attached [pid 664] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 664] chdir("./11") = 0 [pid 664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 664] setpgid(0, 0) = 0 [pid 664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 664] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 665 attached [pid 664] close(3) = 0 [pid 665] set_robust_list(0x7f75466579a0, 24) = 0 [pid 664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] write(1, "executing program\n", 18executing program [pid 665] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 664] <... write resumed>) = 18 [pid 665] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 664] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 665] <... futex resumed>) = 1 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] bpf(BPF_MAP_CREATE, NULL, 0 [pid 664] <... rt_sigaction resumed>NULL, 8) = 0 [pid 665] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 664] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 665] <... futex resumed>) = 1 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 664] <... mmap resumed>) = 0x7f7546637000 [pid 664] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 665] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] rt_sigprocmask(SIG_BLOCK, ~[], [pid 665] <... futex resumed>) = 1 [pid 664] <... rt_sigprocmask resumed>[], 8) = 0 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 664] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 665] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... clone3 resumed> => {parent_tid=[666]}, 88) = 666 [pid 665] <... futex resumed>) = 1 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] rt_sigprocmask(SIG_SETMASK, [], [pid 665] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 663] <... futex resumed>) = 0 [pid 665] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 665] <... futex resumed>) = 1 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... futex resumed>) = 0 [pid 665] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 663] <... futex resumed>) = 0 [pid 665] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 665] <... futex resumed>) = 1 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... bpf resumed>) = 4 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 665] <... futex resumed>) = 1 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 663] <... futex resumed>) = 0 [pid 665] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 663] <... futex resumed>) = 0 [pid 665] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 665] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... sendmsg resumed>) = 20 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 665] <... futex resumed>) = 1 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 666 attached [pid 665] memfd_create("syzkaller", 0 [pid 663] <... futex resumed>) = 0 [pid 666] set_robust_list(0x7f75466579a0, 24 [pid 665] <... memfd_create resumed>) = 5 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 666] <... set_robust_list resumed>) = 0 [pid 665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 666] rt_sigprocmask(SIG_SETMASK, [], [pid 665] <... mmap resumed>) = 0x7f753e237000 [pid 666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 666] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] bpf(BPF_MAP_CREATE, NULL, 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = 0 [pid 666] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... socket resumed>) = 3 [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... bpf resumed>) = 4 [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 666] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... sendmsg resumed>) = 20 [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 664] <... futex resumed>) = 0 [pid 666] memfd_create("syzkaller", 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 666] <... memfd_create resumed>) = 5 [pid 666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./11/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./11/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./11/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./11") = 0 [pid 298] mkdir("./12", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3executing program ) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 667 ./strace-static-x86_64: Process 667 attached [pid 667] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 667] chdir("./12") = 0 [pid 667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 667] setpgid(0, 0) = 0 [pid 667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 667] write(3, "1000", 4) = 4 [pid 667] close(3) = 0 [pid 667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 667] write(1, "executing program\n", 18) = 18 [pid 667] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 667] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 667] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[668]}, 88) = 668 [pid 667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 668 attached [pid 668] set_robust_list(0x7f75466579a0, 24) = 0 [pid 668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 668] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 668] <... futex resumed>) = 1 [pid 668] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 668] memfd_create("syzkaller", 0) = 5 [pid 668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 662] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./10/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./10/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./10/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./10/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./10") = 0 [pid 296] mkdir("./11", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 669 ./strace-static-x86_64: Process 669 attached [pid 669] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 669] chdir("./11") = 0 [pid 669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 669] setpgid(0, 0) = 0 [pid 669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 669] write(3, "1000", 4) = 4 [pid 669] close(3) = 0 [pid 669] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 669] write(1, "executing program\n", 18) = 18 [pid 669] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 669] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 665] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[670]}, 88) = 670 [pid 669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 670 attached [pid 670] set_robust_list(0x7f75466579a0, 24 [pid 666] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 670] <... set_robust_list resumed>) = 0 [pid 670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 670] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] <... futex resumed>) = 0 [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 670] bpf(BPF_MAP_CREATE, NULL, 0 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] <... futex resumed>) = 0 [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 669] <... futex resumed>) = 0 [pid 670] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 670] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = 1 [pid 670] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 669] <... futex resumed>) = 0 [pid 670] <... sendmsg resumed>) = 20 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] memfd_create("syzkaller", 0 [pid 669] <... futex resumed>) = 0 [pid 670] <... memfd_create resumed>) = 5 [pid 670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 670] <... mmap resumed>) = 0x7f753e237000 [pid 668] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 665] <... write resumed>) = 20699119 [pid 665] munmap(0x7f753e237000, 138412032) = 0 [pid 662] <... write resumed>) = 20699119 [pid 665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 665] ioctl(6, LOOP_SET_FD, 5 [pid 662] munmap(0x7f753e237000, 138412032) = 0 [pid 662] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 665] <... ioctl resumed>) = 0 [pid 665] close(5) = 0 [pid 665] close(6 [pid 662] ioctl(6, LOOP_SET_FD, 5 [pid 665] <... close resumed>) = 0 [pid 665] mkdir("./file4", 0777) = 0 [pid 665] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 662] <... ioctl resumed>) = 0 [pid 662] close(5) = 0 [pid 666] <... write resumed>) = 20699119 [pid 666] munmap(0x7f753e237000, 138412032) = 0 [pid 666] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 666] ioctl(6, LOOP_SET_FD, 5 [pid 662] close(6 [pid 666] <... ioctl resumed>) = 0 [pid 666] close(5) = 0 [ 35.314641][ T665] loop0: detected capacity change from 0 to 40427 [ 35.327274][ T662] loop2: detected capacity change from 0 to 40427 [ 35.336447][ T665] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 35.348239][ T666] loop4: detected capacity change from 0 to 40427 [ 35.355084][ T665] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 666] close(6 [pid 662] <... close resumed>) = 0 [pid 662] mkdir("./file4", 0777) = 0 [pid 662] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 666] <... close resumed>) = 0 [pid 666] mkdir("./file4", 0777) = 0 [pid 666] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [ 35.364014][ T665] F2FS-fs (loop0): fault_injection options not supported [ 35.371220][ T665] F2FS-fs (loop0): fault_type options not supported [ 35.379061][ T665] F2FS-fs (loop0): invalid crc value [ 35.391413][ T666] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 35.399083][ T665] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 670] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 668] <... write resumed>) = 20699119 [pid 668] munmap(0x7f753e237000, 138412032) = 0 [pid 668] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [ 35.410276][ T666] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 35.423515][ T666] F2FS-fs (loop4): fault_injection options not supported [ 35.423649][ T668] loop3: detected capacity change from 0 to 40427 [ 35.437824][ T662] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 35.447325][ T662] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.455601][ T666] F2FS-fs (loop4): fault_type options not supported [pid 668] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 668] close(5) = 0 [ 35.470116][ T662] F2FS-fs (loop2): fault_injection options not supported [ 35.475032][ T666] F2FS-fs (loop4): invalid crc value [ 35.476970][ T662] F2FS-fs (loop2): fault_type options not supported [ 35.492798][ T666] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.500373][ T665] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 35.507220][ T665] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.515348][ T662] F2FS-fs (loop2): invalid crc value [pid 668] close(6 [pid 665] <... mount resumed>) = 0 [pid 665] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 665] chdir("./file4") = 0 [pid 665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 665] ioctl(6, LOOP_CLR_FD) = 0 [pid 665] close(6) = 0 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] fspick(AT_FDCWD, ".", 0) = 7 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 668] <... close resumed>) = 0 [pid 668] mkdir("./file4", 0777) = 0 [pid 668] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 670] <... write resumed>) = 20699119 [pid 665] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] munmap(0x7f753e237000, 138412032 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... munmap resumed>) = 0 [pid 670] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 665] <... futex resumed>) = 1 [pid 665] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 670] ioctl(6, LOOP_SET_FD, 5 [pid 665] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 665] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=663}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 665] <... futex resumed>) = 1 [pid 665] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 665] <... futex resumed>) = 1 [pid 665] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 665] <... futex resumed>) = 1 [pid 665] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 665] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 663] <... futex resumed>) = 0 [pid 663] exit_group(0) = ? [pid 665] <... futex resumed>) = ? [pid 665] +++ exited with 0 +++ [pid 663] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=663, si_uid=0, si_status=0, si_utime=5, si_stime=18} --- [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 670] <... ioctl resumed>) = 0 [pid 670] close(5) = 0 [pid 670] close(6 [pid 295] <... restart_syscall resumed>) = 0 [pid 295] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./11/binderfs") = 0 [ 35.528845][ T665] F2FS-fs (loop0): switch discard_unit option is not allowed [ 35.546277][ T662] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.555440][ T670] loop1: detected capacity change from 0 to 40427 [pid 295] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 666] <... mount resumed>) = 0 [pid 666] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 670] <... close resumed>) = 0 [pid 666] chdir("./file4" [pid 670] mkdir("./file4", 0777 [pid 666] <... chdir resumed>) = 0 [pid 670] <... mkdir resumed>) = 0 [pid 666] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 670] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 666] <... openat resumed>) = 6 [pid 666] ioctl(6, LOOP_CLR_FD) = 0 [pid 666] close(6) = 0 [ 35.584692][ T668] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 35.591865][ T666] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 35.598702][ T666] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.610053][ T668] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 35.618933][ T668] F2FS-fs (loop3): fault_injection options not supported [ 35.626734][ T668] F2FS-fs (loop3): fault_type options not supported [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 666] fspick(AT_FDCWD, ".", 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... fspick resumed>) = 7 [pid 664] <... futex resumed>) = 0 [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 0 [pid 664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 666] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... mount resumed>) = 0 [pid 662] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 662] <... openat resumed>) = 5 [ 35.636806][ T670] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 35.647726][ T666] F2FS-fs (loop4): switch discard_unit option is not allowed [ 35.655351][ T662] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.657390][ T670] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 35.663241][ T662] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.678868][ T670] F2FS-fs (loop1): fault_injection options not supported [pid 662] chdir("./file4" [pid 666] <... sendto resumed>) = 36 [pid 666] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=664}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 662] <... chdir resumed>) = 0 [pid 662] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 662] ioctl(6, LOOP_CLR_FD) = 0 [pid 662] close(6) = 0 [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 662] <... futex resumed>) = 1 [pid 661] <... futex resumed>) = 0 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 662] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 666] <... futex resumed>) = 1 [pid 662] <... open resumed>) = 6 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] <... futex resumed>) = 0 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 661] <... futex resumed>) = 0 [pid 662] fspick(AT_FDCWD, ".", 0 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] <... fspick resumed>) = 7 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] <... futex resumed>) = 0 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 661] <... futex resumed>) = 0 [pid 662] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 666] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 666] <... futex resumed>) = 1 [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 666] <... futex resumed>) = 1 [pid 666] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 666] <... futex resumed>) = 1 [pid 666] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 666] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] exit_group(0) = ? [pid 666] <... futex resumed>) = ? [pid 666] +++ exited with 0 +++ [pid 664] +++ exited with 0 +++ [pid 662] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=664, si_uid=0, si_status=0, si_utime=6, si_stime=22} --- [pid 662] <... futex resumed>) = 1 [pid 661] <... futex resumed>) = 0 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 661] <... futex resumed>) = 0 [pid 662] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] <... open resumed>) = 8 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] <... futex resumed>) = 0 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 661] <... futex resumed>) = 0 [pid 662] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] sendfile(6, 6, NULL, 281483568746501 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... restart_syscall resumed>) = 0 [pid 662] <... futex resumed>) = 1 [pid 299] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 661] <... futex resumed>) = 0 [pid 299] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 662] <... futex resumed>) = 0 [pid 661] <... futex resumed>) = 1 [pid 299] newfstatat(3, "", [pid 662] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 662] <... sendto resumed>) = 36 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] getdents64(3, [pid 662] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=661}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 662] <... futex resumed>) = 1 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] <... futex resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(AT_FDCWD, "./11/binderfs", [pid 662] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 661] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 662] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] unlink("./11/binderfs" [pid 662] <... futex resumed>) = 1 [pid 661] <... futex resumed>) = 0 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... unlink resumed>) = 0 [pid 662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 661] <... futex resumed>) = 0 [pid 662] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 299] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 662] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] <... futex resumed>) = 0 [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] <... futex resumed>) = 0 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 661] <... futex resumed>) = 1 [pid 662] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 661] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 661] <... futex resumed>) = 1 [pid 662] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 661] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 662] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 662] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] <... futex resumed>) = 0 [pid 662] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 661] exit_group(0 [pid 662] <... futex resumed>) = ? [pid 661] <... exit_group resumed>) = ? [pid 662] +++ exited with 0 +++ [pid 661] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=661, si_uid=0, si_status=0, si_utime=5, si_stime=25} --- [ 35.688005][ T668] F2FS-fs (loop3): invalid crc value [ 35.690484][ T670] F2FS-fs (loop1): fault_type options not supported [ 35.701279][ T670] F2FS-fs (loop1): invalid crc value [ 35.708948][ T662] F2FS-fs (loop2): switch discard_unit option is not allowed [ 35.724263][ T670] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./12/binderfs") = 0 [ 35.750840][ T668] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 297] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = 0 [pid 295] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./11/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./11/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./11/file4") = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./11") = 0 [pid 295] mkdir("./12", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 692 ./strace-static-x86_64: Process 692 attached [pid 692] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 692] chdir("./12") = 0 [pid 692] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 692] setpgid(0, 0) = 0 [pid 692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 692] write(3, "1000", 4) = 4 [pid 692] close(3) = 0 [pid 692] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 692] write(1, "executing program\n", 18) = 18 [pid 692] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] <... mount resumed>) = 0 [pid 668] <... mount resumed>) = 0 [pid 670] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 670] chdir("./file4") = 0 [pid 670] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 668] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 692] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 670] ioctl(6, LOOP_CLR_FD [pid 692] <... rt_sigaction resumed>NULL, 8) = 0 [pid 668] <... openat resumed>) = 5 [pid 670] <... ioctl resumed>) = 0 [pid 692] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 670] close(6 [pid 668] chdir("./file4" [pid 692] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 670] <... close resumed>) = 0 [pid 668] <... chdir resumed>) = 0 [pid 692] <... mmap resumed>) = 0x7f7546637000 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 692] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 668] <... openat resumed>) = 6 [pid 692] <... mprotect resumed>) = 0 [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] ioctl(6, LOOP_CLR_FD [pid 692] rt_sigprocmask(SIG_BLOCK, ~[], [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] <... futex resumed>) = 0 [pid 668] <... ioctl resumed>) = 0 [pid 692] <... rt_sigprocmask resumed>[], 8) = 0 [pid 670] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] close(6 [pid 670] <... open resumed>) = 6 [pid 692] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 668] <... close resumed>) = 0 [pid 692] <... clone3 resumed> => {parent_tid=[693]}, 88) = 693 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] rt_sigprocmask(SIG_SETMASK, [], [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 670] fspick(AT_FDCWD, ".", 0 [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] <... futex resumed>) = 0 [pid 668] <... open resumed>) = 6 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 692] <... futex resumed>) = 0 [pid 670] <... fspick resumed>) = 7 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 667] <... futex resumed>) = 0 [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] fspick(AT_FDCWD, ".", 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 35.816971][ T668] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 35.829582][ T668] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.835292][ T670] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 35.845571][ T670] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 669] <... futex resumed>) = 0 [pid 667] <... futex resumed>) = 0 [pid 670] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... fspick resumed>) = 7 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 693 attached [pid 693] set_robust_list(0x7f75466579a0, 24) = 0 [pid 693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 693] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] <... futex resumed>) = 0 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = 0 [pid 668] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... futex resumed>) = 1 [pid 668] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] <... futex resumed>) = 0 [pid 693] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = 0 [pid 692] <... futex resumed>) = 1 [pid 693] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 692] <... futex resumed>) = 0 [pid 693] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 693] <... futex resumed>) = 0 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 692] <... futex resumed>) = 0 [pid 693] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 692] <... futex resumed>) = 0 [pid 693] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... socket resumed>) = 3 [pid 692] <... futex resumed>) = 0 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... futex resumed>) = 0 [pid 693] <... bpf resumed>) = 4 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = 1 [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] <... futex resumed>) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 692] <... futex resumed>) = 0 [pid 693] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... open resumed>) = 8 [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 693] <... futex resumed>) = 0 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 692] <... futex resumed>) = 0 [pid 693] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 693] <... futex resumed>) = 0 [pid 692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 669] <... futex resumed>) = 0 [pid 693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 692] <... futex resumed>) = 0 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] <... sendmsg resumed>) = 20 [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 693] <... futex resumed>) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] memfd_create("syzkaller", 0 [pid 692] <... futex resumed>) = 0 [pid 693] <... memfd_create resumed>) = 5 [pid 693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 693] <... mmap resumed>) = 0x7f753e237000 [pid 670] sendfile(6, 6, NULL, 281483568746501 [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 670] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 668] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... open resumed>) = 8 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] <... sendto resumed>) = 36 [pid 668] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 670] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=669}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 668] sendfile(6, 6, NULL, 281483568746501 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 669] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... sendto resumed>) = 36 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] <... futex resumed>) = 0 [pid 668] recvfrom(3, [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 670] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 668] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=667}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 670] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = 1 [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 667] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] <... futex resumed>) = 0 [pid 668] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 668] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 670] <... futex resumed>) = 0 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 670] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 667] <... futex resumed>) = 0 [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 668] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 670] <... futex resumed>) = 0 [pid 669] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 670] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 669] <... futex resumed>) = 0 [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 669] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 670] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = 0 [ 35.881875][ T670] F2FS-fs (loop1): switch discard_unit option is not allowed [ 35.889456][ T668] F2FS-fs (loop3): switch discard_unit option is not allowed [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 668] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 669] exit_group(0 [pid 668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 667] <... futex resumed>) = 0 [pid 670] <... futex resumed>) = ? [pid 669] <... exit_group resumed>) = ? [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 670] +++ exited with 0 +++ [pid 667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 669] +++ exited with 0 +++ [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 668] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 668] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=669, si_uid=0, si_status=0, si_utime=4, si_stime=21} --- [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] restart_syscall(<... resuming interrupted clone ...> [pid 668] <... futex resumed>) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 667] <... futex resumed>) = 0 [pid 668] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 667] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 668] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... restart_syscall resumed>) = 0 [pid 668] <... futex resumed>) = 0 [pid 667] exit_group(0) = ? [pid 668] +++ exited with 0 +++ [pid 667] +++ exited with 0 +++ [pid 299] <... umount2 resumed>) = 0 [pid 296] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=667, si_uid=0, si_status=0, si_utime=3, si_stime=22} --- [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 299] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(3, "", [pid 299] newfstatat(AT_FDCWD, "./11/file4", [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] openat(AT_FDCWD, "./11/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... openat resumed>) = 4 [pid 296] newfstatat(AT_FDCWD, "./11/binderfs", [pid 299] newfstatat(4, "", [pid 296] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, [pid 296] unlink("./11/binderfs") = 0 [pid 296] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./12/binderfs", [pid 299] getdents64(4, [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] unlink("./12/binderfs") = 0 [pid 299] close(4 [pid 298] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... close resumed>) = 0 [pid 299] rmdir("./11/file4") = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./11") = 0 [pid 299] mkdir("./12", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 694 [pid 297] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 694 attached [pid 694] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 694] chdir("./12") = 0 [pid 694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 694] setpgid(0, 0) = 0 [pid 694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 694] write(3, "1000", 4) = 4 [pid 694] close(3) = 0 [pid 297] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 694] symlink("/dev/binderfs", "./binderfs") = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./12/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./12/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 694] write(1, "executing program\n", 18 [pid 297] getdents64(4, executing program [pid 694] <... write resumed>) = 18 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 694] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 297] getdents64(4, [pid 694] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 297] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 297] close(4 [pid 694] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 297] <... close resumed>) = 0 [pid 694] <... mprotect resumed>) = 0 [pid 297] rmdir("./12/file4" [pid 694] rt_sigprocmask(SIG_BLOCK, ~[], [pid 297] <... rmdir resumed>) = 0 [pid 694] <... rt_sigprocmask resumed>[], 8) = 0 [pid 694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[695]}, 88) = 695 [pid 694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./12") = 0 [pid 297] mkdir("./13", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 696 ./strace-static-x86_64: Process 696 attached [pid 696] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 696] chdir("./13"./strace-static-x86_64: Process 695 attached ) = 0 [pid 696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 696] setpgid(0, 0 [pid 695] set_robust_list(0x7f75466579a0, 24 [pid 696] <... setpgid resumed>) = 0 [pid 696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 695] <... set_robust_list resumed>) = 0 [pid 696] <... openat resumed>) = 3 [pid 695] rt_sigprocmask(SIG_SETMASK, [], [pid 696] write(3, "1000", 4) = 4 [pid 696] close(3 [pid 695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 696] <... close resumed>) = 0 [pid 695] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 696] symlink("/dev/binderfs", "./binderfs" [pid 695] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 696] <... symlink resumed>) = 0 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 696] write(1, "executing program\n", 18 [pid 695] <... futex resumed>) = 1 [pid 694] <... futex resumed>) = 0 [pid 696] <... write resumed>) = 18 [pid 696] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] <... futex resumed>) = 0 [pid 694] <... futex resumed>) = 0 [pid 696] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 696] <... rt_sigaction resumed>NULL, 8) = 0 [pid 696] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 695] bpf(BPF_MAP_CREATE, NULL, 0 [pid 696] <... mmap resumed>) = 0x7f7546637000 [pid 696] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 695] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 696] <... mprotect resumed>) = 0 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] rt_sigprocmask(SIG_BLOCK, ~[], [pid 694] <... futex resumed>) = 0 [pid 696] <... rt_sigprocmask resumed>[], 8) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 694] <... futex resumed>) = 0 [pid 695] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 696] <... clone3 resumed> => {parent_tid=[697]}, 88) = 697 [pid 696] rt_sigprocmask(SIG_SETMASK, [], [pid 695] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] <... futex resumed>) = 0 [pid 695] <... futex resumed>) = 1 [pid 694] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... futex resumed>) = 0 [pid 695] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... futex resumed>) = 0 [pid 695] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 694] <... futex resumed>) = 0 [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... futex resumed>) = 0 [pid 695] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 694] <... futex resumed>) = 0 [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... futex resumed>) = 0 [pid 695] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... socket resumed>) = 3 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] <... futex resumed>) = 0 [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 694] <... futex resumed>) = 0 [pid 695] <... bpf resumed>) = 4 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = 0 [pid 694] <... futex resumed>) = 1 [pid 695] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 694] <... futex resumed>) = 0 [pid 695] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 695] <... futex resumed>) = 0 [pid 694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... futex resumed>) = 0 [pid 695] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... sendmsg resumed>) = 20 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 694] <... futex resumed>) = 0 [pid 695] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 694] <... futex resumed>) = 0 [pid 695] memfd_create("syzkaller", 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 695] <... memfd_create resumed>) = 5 [pid 695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 ./strace-static-x86_64: Process 697 attached [pid 697] set_robust_list(0x7f75466579a0, 24) = 0 [pid 697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 697] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 697] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... socket resumed>) = 3 [pid 696] <... futex resumed>) = 0 [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] <... futex resumed>) = 0 [pid 696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 696] <... futex resumed>) = 0 [pid 697] <... bpf resumed>) = 4 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 697] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 696] <... futex resumed>) = 0 [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 697] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 696] <... futex resumed>) = 0 [pid 697] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 697] <... futex resumed>) = 0 [pid 697] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 697] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 696] <... futex resumed>) = 1 [pid 697] memfd_create("syzkaller", 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 697] <... memfd_create resumed>) = 5 [pid 697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./12/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./12/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./12/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./12") = 0 [pid 298] mkdir("./13", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 698 ./strace-static-x86_64: Process 698 attached [pid 698] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 698] chdir("./13") = 0 [pid 698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 698] setpgid(0, 0) = 0 [pid 698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 698] write(3, "1000", 4) = 4 [pid 698] close(3) = 0 [pid 698] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 698] write(1, "executing program\n", 18) = 18 [pid 698] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 698] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 698] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 698] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 698] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[699]}, 88) = 699 [pid 698] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 699 attached [pid 699] set_robust_list(0x7f75466579a0, 24) = 0 [pid 699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 699] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 699] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] <... sendmsg resumed>) = 20 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] memfd_create("syzkaller", 0 [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 699] <... memfd_create resumed>) = 5 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./11/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./11/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./11/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./11/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./11") = 0 [pid 296] mkdir("./12", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 700 [pid 697] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 700 attached [pid 695] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 700] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 700] chdir("./12") = 0 [pid 700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 700] setpgid(0, 0) = 0 [pid 700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 693] <... write resumed>) = 20699119 [pid 693] munmap(0x7f753e237000, 138412032 [pid 700] <... openat resumed>) = 3 [pid 700] write(3, "1000", 4) = 4 [pid 700] close(3) = 0 [pid 700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 700] write(1, "executing program\n", 18executing program ) = 18 [pid 700] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 700] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 693] <... munmap resumed>) = 0 [pid 700] <... mmap resumed>) = 0x7f7546637000 [pid 700] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 693] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 693] <... openat resumed>) = 6 [pid 700] <... clone3 resumed> => {parent_tid=[702]}, 88) = 702 [pid 693] ioctl(6, LOOP_SET_FD, 5 [pid 700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 702 attached [pid 702] set_robust_list(0x7f75466579a0, 24) = 0 [pid 702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 702] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = 0 [pid 702] <... futex resumed>) = 1 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] bpf(BPF_MAP_CREATE, NULL, 0 [pid 700] <... futex resumed>) = 0 [pid 702] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = 0 [pid 702] <... futex resumed>) = 1 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 700] <... futex resumed>) = 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 693] <... ioctl resumed>) = 0 [pid 693] close(5) = 0 [pid 693] close(6 [pid 702] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = 0 [pid 702] <... futex resumed>) = 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = 1 [pid 702] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... futex resumed>) = 0 [pid 702] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... socket resumed>) = 3 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... futex resumed>) = 0 [pid 702] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... bpf resumed>) = 4 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... futex resumed>) = 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] <... futex resumed>) = 0 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... futex resumed>) = 0 [pid 702] memfd_create("syzkaller", 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 36.268591][ T693] loop0: detected capacity change from 0 to 40427 [pid 702] <... memfd_create resumed>) = 5 [pid 702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 693] <... close resumed>) = 0 [pid 693] mkdir("./file4", 0777) = 0 [pid 693] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 695] <... write resumed>) = 20699119 [pid 695] munmap(0x7f753e237000, 138412032) = 0 [pid 695] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 695] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 695] close(5) = 0 [pid 695] close(6 [ 36.361969][ T693] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 36.368753][ T693] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.387106][ T695] loop4: detected capacity change from 0 to 40427 [ 36.394025][ T693] F2FS-fs (loop0): fault_injection options not supported [pid 699] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 697] <... write resumed>) = 20699119 [pid 697] munmap(0x7f753e237000, 138412032) = 0 [pid 697] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 697] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 695] <... close resumed>) = 0 [pid 695] mkdir("./file4", 0777 [pid 697] close(5 [pid 695] <... mkdir resumed>) = 0 [pid 695] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 697] <... close resumed>) = 0 [ 36.420791][ T693] F2FS-fs (loop0): fault_type options not supported [ 36.436856][ T693] F2FS-fs (loop0): invalid crc value [ 36.450593][ T697] loop2: detected capacity change from 0 to 40427 [ 36.461584][ T695] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [pid 697] close(6) = 0 [pid 697] mkdir("./file4", 0777) = 0 [pid 697] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 702] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 699] <... write resumed>) = 20699119 [ 36.479206][ T695] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.488320][ T693] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.505144][ T695] F2FS-fs (loop4): fault_injection options not supported [ 36.523147][ T695] F2FS-fs (loop4): fault_type options not supported [pid 699] munmap(0x7f753e237000, 138412032) = 0 [pid 699] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 699] ioctl(6, LOOP_SET_FD, 5) = 0 [ 36.532220][ T699] loop3: detected capacity change from 0 to 40427 [ 36.539622][ T695] F2FS-fs (loop4): invalid crc value [ 36.546099][ T697] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 36.553442][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 36.553456][ T30] audit: type=1400 audit(1732438165.332:90): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [pid 699] close(5) = 0 [ 36.560051][ T697] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 36.582258][ T30] audit: type=1400 audit(1732438165.332:91): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.611610][ T697] F2FS-fs (loop2): fault_injection options not supported [ 36.622642][ T697] F2FS-fs (loop2): fault_type options not supported [pid 699] close(6) = 0 [pid 699] mkdir("./file4", 0777) = 0 [pid 699] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 693] <... mount resumed>) = 0 [pid 693] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 693] chdir("./file4") = 0 [pid 693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 693] ioctl(6, LOOP_CLR_FD) = 0 [pid 693] close(6) = 0 [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] <... open resumed>) = 6 [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... write resumed>) = 20699119 [pid 693] <... futex resumed>) = 1 [pid 692] <... futex resumed>) = 0 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] munmap(0x7f753e237000, 138412032 [pid 693] fspick(AT_FDCWD, ".", 0 [pid 692] <... futex resumed>) = 0 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... munmap resumed>) = 0 [pid 702] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [ 36.623527][ T695] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.635899][ T697] F2FS-fs (loop2): invalid crc value [ 36.641496][ T693] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 36.659464][ T693] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.673369][ T697] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 702] ioctl(6, LOOP_SET_FD, 5 [pid 693] <... fspick resumed>) = 7 [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 693] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 692] <... futex resumed>) = 0 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... ioctl resumed>) = 0 [pid 702] close(5) = 0 [pid 702] close(6) = 0 [pid 702] mkdir("./file4", 0777) = 0 [pid 702] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 695] <... mount resumed>) = 0 [pid 695] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 695] chdir("./file4") = 0 [pid 695] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 695] ioctl(6, LOOP_CLR_FD) = 0 [pid 695] close(6) = 0 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 36.675498][ T702] loop1: detected capacity change from 0 to 40427 [ 36.689288][ T693] F2FS-fs (loop0): switch discard_unit option is not allowed [ 36.700780][ T699] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 36.707695][ T695] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.717536][ T695] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.718309][ T699] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... open resumed>) = 8 [pid 692] <... futex resumed>) = 0 [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 1 [pid 695] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 693] <... futex resumed>) = 0 [pid 692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 692] <... futex resumed>) = 0 [pid 693] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... open resumed>) = 6 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] <... futex resumed>) = 1 [pid 692] <... futex resumed>) = 0 [pid 695] <... futex resumed>) = 1 [pid 695] fspick(AT_FDCWD, ".", 0 [pid 693] sendfile(6, 6, NULL, 281483568746501 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] <... fspick resumed>) = 7 [pid 693] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... sendto resumed>) = 36 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 693] recvfrom(3, [pid 694] <... futex resumed>) = 0 [pid 693] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=692}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 1 [ 36.734039][ T702] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 36.744360][ T699] F2FS-fs (loop3): fault_injection options not supported [ 36.751992][ T699] F2FS-fs (loop3): fault_type options not supported [ 36.764060][ T702] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 36.770629][ T695] F2FS-fs (loop4): switch discard_unit option is not allowed [pid 695] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 1 [pid 695] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 1 [pid 695] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 1 [pid 695] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 1 [pid 695] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 695] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=694}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 1 [pid 695] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 695] <... futex resumed>) = 1 [pid 695] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 695] <... futex resumed>) = 1 [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 695] <... futex resumed>) = 1 [pid 695] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 694] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 695] <... futex resumed>) = 1 [pid 693] <... futex resumed>) = 1 [pid 695] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 695] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 694] <... futex resumed>) = 0 [pid 694] exit_group(0) = ? [pid 695] <... futex resumed>) = ? [pid 695] +++ exited with 0 +++ [pid 694] +++ exited with 0 +++ [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] <... futex resumed>) = 0 [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=694, si_uid=0, si_status=0, si_utime=5, si_stime=22} --- [pid 693] <... futex resumed>) = 0 [pid 692] <... futex resumed>) = 1 [pid 299] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 693] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 693] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 299] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... openat resumed>) = 3 [pid 693] <... futex resumed>) = 1 [pid 692] <... futex resumed>) = 0 [pid 299] newfstatat(3, "", [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 692] <... futex resumed>) = 0 [pid 299] getdents64(3, [pid 693] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 693] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 299] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 693] <... futex resumed>) = 1 [pid 692] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./12/binderfs", [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 692] <... futex resumed>) = 0 [pid 299] unlink("./12/binderfs" [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 299] <... unlink resumed>) = 0 [pid 693] <... futex resumed>) = 0 [pid 692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 692] <... futex resumed>) = 0 [pid 693] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 693] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 692] <... futex resumed>) = 0 [pid 693] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 692] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 693] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 693] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 692] <... futex resumed>) = 0 [pid 693] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 692] exit_group(0 [pid 693] <... futex resumed>) = ? [pid 692] <... exit_group resumed>) = ? [pid 693] +++ exited with 0 +++ [pid 692] +++ exited with 0 +++ [pid 697] <... mount resumed>) = 0 [pid 697] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 697] chdir("./file4") = 0 [pid 697] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 697] ioctl(6, LOOP_CLR_FD) = 0 [pid 697] close(6 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=692, si_uid=0, si_status=0, si_utime=4, si_stime=16} --- [pid 697] <... close resumed>) = 0 [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", [pid 697] <... futex resumed>) = 0 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./12/binderfs" [pid 697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 295] <... unlink resumed>) = 0 [pid 295] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 697] <... open resumed>) = 6 [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] <... futex resumed>) = 0 [pid 697] fspick(AT_FDCWD, ".", 0) = 7 [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 36.772843][ T702] F2FS-fs (loop1): fault_injection options not supported [ 36.787180][ T699] F2FS-fs (loop3): invalid crc value [ 36.788812][ T697] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 36.792806][ T702] F2FS-fs (loop1): fault_type options not supported [ 36.799905][ T697] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.820394][ T702] F2FS-fs (loop1): invalid crc value [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 697] <... futex resumed>) = 0 [pid 696] <... futex resumed>) = 1 [pid 697] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 697] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=696}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 697] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 697] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 697] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 697] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 697] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 696] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 697] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 697] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 696] <... futex resumed>) = 0 [pid 696] exit_group(0 [pid 697] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 696] <... exit_group resumed>) = ? [pid 697] <... futex resumed>) = ? [pid 697] +++ exited with 0 +++ [pid 696] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=696, si_uid=0, si_status=0, si_utime=6, si_stime=20} --- [ 36.837813][ T699] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.849415][ T697] F2FS-fs (loop2): switch discard_unit option is not allowed [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./13/binderfs") = 0 [ 36.883747][ T702] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 297] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 702] <... mount resumed>) = 0 [pid 702] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 702] chdir("./file4") = 0 [pid 702] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 702] ioctl(6, LOOP_CLR_FD) = 0 [pid 702] close(6) = 0 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] fspick(AT_FDCWD, ".", 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... fspick resumed>) = 7 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] <... futex resumed>) = 0 [pid 702] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 36.938539][ T702] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.946874][ T702] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.969082][ T702] F2FS-fs (loop1): switch discard_unit option is not allowed [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] sendfile(6, 6, NULL, 281483568746501 [pid 700] <... futex resumed>) = 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... sendto resumed>) = 36 [pid 702] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=700}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = 1 [pid 702] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 702] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 700] <... futex resumed>) = 0 [pid 702] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] <... futex resumed>) = 0 [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 702] <... futex resumed>) = 0 [pid 700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... futex resumed>) = 0 [pid 702] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 702] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 700] <... futex resumed>) = 0 [pid 702] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 700] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 702] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 702] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 700] <... futex resumed>) = 0 [pid 702] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 700] exit_group(0 [pid 702] <... futex resumed>) = ? [pid 700] <... exit_group resumed>) = ? [pid 702] +++ exited with 0 +++ [pid 700] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=700, si_uid=0, si_status=0, si_utime=6, si_stime=20} --- [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 296] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./12/binderfs") = 0 [pid 296] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 699] <... mount resumed>) = 0 [pid 699] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 699] chdir("./file4") = 0 [pid 699] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 699] ioctl(6, LOOP_CLR_FD) = 0 [pid 699] close(6) = 0 [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... open resumed>) = 6 [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] fspick(AT_FDCWD, ".", 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... fspick resumed>) = 7 [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 36.996247][ T699] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.004819][ T699] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = 0 [pid 699] <... futex resumed>) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... open resumed>) = 8 [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] sendfile(6, 6, NULL, 281483568746501 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... sendto resumed>) = 36 [pid 699] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=698}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 699] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] <... futex resumed>) = 0 [pid 699] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 699] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 698] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = 0 [pid 699] <... futex resumed>) = 0 [pid 699] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] <... futex resumed>) = 0 [pid 698] <... futex resumed>) = 1 [pid 699] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = 0 [pid 698] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 699] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 698] <... futex resumed>) = 0 [pid 699] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 698] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 699] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 699] <... futex resumed>) = 0 [pid 698] exit_group(0 [pid 699] ????( [pid 698] <... exit_group resumed>) = ? [pid 699] <... ???? resumed>) = 0xe7 [pid 699] +++ exited with 0 +++ [pid 698] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=698, si_uid=0, si_status=0, si_utime=7, si_stime=21} --- [pid 295] <... umount2 resumed>) = 0 [pid 298] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./13/binderfs") = 0 [pid 298] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./12/file4", [pid 299] newfstatat(AT_FDCWD, "./12/file4", [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./12/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] openat(AT_FDCWD, "./12/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... openat resumed>) = 4 [pid 299] <... openat resumed>) = 4 [pid 295] newfstatat(4, "", [pid 299] newfstatat(4, "", [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, [pid 299] getdents64(4, [pid 295] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, [pid 299] getdents64(4, [pid 295] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4 [pid 299] close(4) = 0 [pid 295] <... close resumed>) = 0 [pid 299] rmdir("./12/file4" [pid 295] rmdir("./12/file4" [pid 299] <... rmdir resumed>) = 0 [pid 295] <... rmdir resumed>) = 0 [pid 299] getdents64(3, [pid 297] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] getdents64(3, [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] close(3 [pid 297] newfstatat(AT_FDCWD, "./13/file4", [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] <... close resumed>) = 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] close(3 [pid 299] rmdir("./12" [pid 297] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... close resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 295] rmdir("./12" [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] mkdir("./13", 0777 [pid 297] openat(AT_FDCWD, "./13/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... rmdir resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 295] mkdir("./13", 0777 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 297] newfstatat(4, "", [pid 295] <... mkdir resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 299] ioctl(3, LOOP_CLR_FD [pid 297] getdents64(4, [pid 295] <... openat resumed>) = 3 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] ioctl(3, LOOP_CLR_FD [pid 299] close(3 [pid 297] getdents64(4, [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... close resumed>) = 0 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(3 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] close(4 [pid 295] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... clone resumed>, child_tidptr=0x55558ce1a690) = 723 [pid 297] rmdir("./13/file4") = 0 [pid 295] <... clone resumed>, child_tidptr=0x55558ce1a690) = 724 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./13") = 0 [pid 297] mkdir("./14", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 725 ./strace-static-x86_64: Process 725 attached [pid 725] set_robust_list(0x55558ce1a6a0, 24) = 0 [ 37.050799][ T699] F2FS-fs (loop3): switch discard_unit option is not allowed executing program [pid 725] chdir("./14") = 0 [pid 725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 725] setpgid(0, 0) = 0 [pid 725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 725] write(3, "1000", 4) = 4 [pid 725] close(3) = 0 [pid 725] symlink("/dev/binderfs", "./binderfs") = 0 [pid 725] write(1, "executing program\n", 18) = 18 [pid 725] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 725] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 725] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[726]}, 88) = 726 [pid 725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 726 attached [pid 726] set_robust_list(0x7f75466579a0, 24) = 0 [pid 726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 726] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 726] <... futex resumed>) = 1 [pid 726] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 726] <... futex resumed>) = 1 [pid 726] memfd_create("syzkaller", 0) = 5 [pid 726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 ./strace-static-x86_64: Process 723 attached ./strace-static-x86_64: Process 724 attached [pid 724] set_robust_list(0x55558ce1a6a0, 24 [pid 723] set_robust_list(0x55558ce1a6a0, 24 [pid 724] <... set_robust_list resumed>) = 0 [pid 723] <... set_robust_list resumed>) = 0 [pid 723] chdir("./13" [pid 724] chdir("./13") = 0 [pid 723] <... chdir resumed>) = 0 [pid 723] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 723] <... prctl resumed>) = 0 [pid 724] <... prctl resumed>) = 0 [pid 723] setpgid(0, 0 [pid 724] setpgid(0, 0 [pid 723] <... setpgid resumed>) = 0 [pid 723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 724] <... setpgid resumed>) = 0 [pid 724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 723] <... openat resumed>) = 3 [pid 724] <... openat resumed>) = 3 [pid 723] write(3, "1000", 4) = 4 [pid 724] write(3, "1000", 4) = 4 [pid 723] close(3 [pid 724] close(3 [pid 723] <... close resumed>) = 0 [pid 724] <... close resumed>) = 0 [pid 723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 723] write(1, "executing program\n", 18executing program [pid 724] write(1, "executing program\n", 18 [pid 723] <... write resumed>) = 18 executing program [pid 724] <... write resumed>) = 18 [pid 723] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = 0 [pid 723] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 724] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 723] <... rt_sigaction resumed>NULL, 8) = 0 [pid 724] <... rt_sigaction resumed>NULL, 8) = 0 [pid 723] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 723] <... mmap resumed>) = 0x7f7546637000 [pid 724] <... mmap resumed>) = 0x7f7546637000 [pid 723] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 724] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 723] rt_sigprocmask(SIG_BLOCK, ~[], [pid 724] rt_sigprocmask(SIG_BLOCK, ~[], [pid 723] <... rt_sigprocmask resumed>[], 8) = 0 [pid 724] <... rt_sigprocmask resumed>[], 8) = 0 [pid 723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 723] <... clone3 resumed> => {parent_tid=[727]}, 88) = 727 [pid 724] <... clone3 resumed> => {parent_tid=[728]}, 88) = 728 [pid 724] rt_sigprocmask(SIG_SETMASK, [], [pid 723] rt_sigprocmask(SIG_SETMASK, [], [pid 724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 727 attached [pid 727] set_robust_list(0x7f75466579a0, 24) = 0 [pid 727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 727] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 727] <... futex resumed>) = 1 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 728 attached [pid 728] set_robust_list(0x7f75466579a0, 24 [pid 723] <... futex resumed>) = 0 [pid 727] <... futex resumed>) = 1 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] <... set_robust_list resumed>) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 728] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 727] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 723] <... futex resumed>) = 0 [pid 727] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] <... futex resumed>) = 0 [pid 723] <... futex resumed>) = 0 [pid 727] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 724] <... futex resumed>) = 1 [pid 728] <... futex resumed>) = 0 [pid 728] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 723] <... futex resumed>) = 0 [pid 727] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] <... futex resumed>) = 1 [pid 723] <... futex resumed>) = 0 [pid 728] <... futex resumed>) = 0 [pid 728] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 0 [pid 727] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 727] <... futex resumed>) = 1 [pid 723] <... futex resumed>) = 0 [pid 727] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 723] <... futex resumed>) = 0 [pid 727] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 727] <... socket resumed>) = 3 [pid 728] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 727] <... futex resumed>) = 1 [pid 723] <... futex resumed>) = 0 [pid 727] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 723] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] <... bpf resumed>) = 4 [pid 724] <... futex resumed>) = 0 [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 1 [pid 723] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = 1 [pid 727] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 723] <... futex resumed>) = 0 [pid 727] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 728] <... futex resumed>) = 0 [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 727] <... futex resumed>) = 1 [pid 723] <... futex resumed>) = 0 [pid 727] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 723] <... futex resumed>) = 0 [pid 727] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 727] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 723] <... futex resumed>) = 0 [pid 727] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 723] <... futex resumed>) = 0 [pid 727] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... sendmsg resumed>) = 20 [pid 728] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = 1 [pid 723] <... futex resumed>) = 0 [pid 727] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 723] <... futex resumed>) = 0 [pid 728] <... futex resumed>) = 1 [pid 727] memfd_create("syzkaller", 0 [pid 724] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 727] <... memfd_create resumed>) = 5 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 724] <... futex resumed>) = 0 [pid 728] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 727] <... mmap resumed>) = 0x7f753e237000 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = 1 [pid 728] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... socket resumed>) = 3 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] <... futex resumed>) = 0 [pid 728] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... bpf resumed>) = 4 [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 728] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... sendmsg resumed>) = 20 [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] memfd_create("syzkaller", 0 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... memfd_create resumed>) = 5 [pid 724] <... futex resumed>) = 0 [pid 728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 728] <... mmap resumed>) = 0x7f753e237000 [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./12/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./12/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./12/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./12/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./12") = 0 [pid 296] mkdir("./13", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 729 ./strace-static-x86_64: Process 729 attached [pid 729] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 729] chdir("./13") = 0 [pid 729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 729] setpgid(0, 0) = 0 [pid 729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 729] write(3, "1000", 4) = 4 [pid 729] close(3) = 0 [pid 729] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 729] write(1, "executing program\n", 18) = 18 [pid 729] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 729] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 729] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 729] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[730]}, 88) = 730 [pid 729] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 730 attached [pid 730] set_robust_list(0x7f75466579a0, 24) = 0 [pid 730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 730] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 730] <... futex resumed>) = 1 [pid 730] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 730] <... futex resumed>) = 1 [pid 730] memfd_create("syzkaller", 0) = 5 [pid 730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 726] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 728] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./13/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./13/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./13/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./13") = 0 [pid 298] mkdir("./14", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 732 ./strace-static-x86_64: Process 732 attached [pid 732] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 732] chdir("./14") = 0 [pid 732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 732] setpgid(0, 0) = 0 [pid 732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 732] write(3, "1000", 4) = 4 [pid 732] close(3) = 0 [pid 732] symlink("/dev/binderfs", "./binderfs") = 0 [pid 732] write(1, "executing program\n", 18executing program ) = 18 [pid 732] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 732] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[733]}, 88) = 733 [pid 732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 733 attached [pid 733] set_robust_list(0x7f75466579a0, 24) = 0 [pid 733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 733] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] bpf(BPF_MAP_CREATE, NULL, 0 [pid 732] <... futex resumed>) = 0 [pid 733] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 733] <... futex resumed>) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 733] <... futex resumed>) = 1 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 733] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 733] <... futex resumed>) = 1 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 733] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... sendmsg resumed>) = 20 [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 733] <... futex resumed>) = 1 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 733] memfd_create("syzkaller", 0) = 5 [pid 733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 730] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 726] <... write resumed>) = 20699119 [pid 726] munmap(0x7f753e237000, 138412032) = 0 [pid 726] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 726] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 726] close(5) = 0 [pid 726] close(6 [pid 733] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 728] <... write resumed>) = 20699119 [pid 728] munmap(0x7f753e237000, 138412032) = 0 [pid 728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [ 37.496364][ T726] loop2: detected capacity change from 0 to 40427 [pid 728] ioctl(6, LOOP_SET_FD, 5 [pid 726] <... close resumed>) = 0 [pid 726] mkdir("./file4", 0777) = 0 [pid 726] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 728] <... ioctl resumed>) = 0 [pid 728] close(5) = 0 [pid 728] close(6 [pid 727] <... write resumed>) = 20699119 [pid 727] munmap(0x7f753e237000, 138412032) = 0 [pid 727] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 727] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 727] close(5) = 0 [ 37.549194][ T728] loop0: detected capacity change from 0 to 40427 [ 37.580686][ T727] loop4: detected capacity change from 0 to 40427 [pid 727] close(6 [pid 728] <... close resumed>) = 0 [pid 728] mkdir("./file4", 0777 [pid 730] <... write resumed>) = 20699119 [pid 730] munmap(0x7f753e237000, 138412032) = 0 [pid 730] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 730] ioctl(6, LOOP_SET_FD, 5 [pid 728] <... mkdir resumed>) = 0 [pid 728] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 730] <... ioctl resumed>) = 0 [pid 730] close(5) = 0 [pid 730] close(6 [pid 727] <... close resumed>) = 0 [pid 727] mkdir("./file4", 0777) = 0 [pid 727] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 733] <... write resumed>) = 20699119 [ 37.600274][ T726] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 37.607714][ T726] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 37.613243][ T730] loop1: detected capacity change from 0 to 40427 [ 37.623177][ T726] F2FS-fs (loop2): fault_injection options not supported [ 37.631461][ T727] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 37.638713][ T727] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 733] munmap(0x7f753e237000, 138412032) = 0 [pid 733] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 733] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 733] close(5) = 0 [pid 733] close(6 [pid 730] <... close resumed>) = 0 [pid 730] mkdir("./file4", 0777) = 0 [ 37.641076][ T726] F2FS-fs (loop2): fault_type options not supported [ 37.653548][ T728] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 37.654707][ T733] loop3: detected capacity change from 0 to 40427 [ 37.668869][ T727] F2FS-fs (loop4): fault_injection options not supported [ 37.671654][ T726] F2FS-fs (loop2): invalid crc value [ 37.678256][ T727] F2FS-fs (loop4): fault_type options not supported [ 37.683741][ T728] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 730] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 733] <... close resumed>) = 0 [pid 733] mkdir("./file4", 0777) = 0 [ 37.687396][ T730] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 37.695770][ T728] F2FS-fs (loop0): fault_injection options not supported [ 37.705587][ T730] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 37.716910][ T733] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 37.725460][ T733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.733493][ T726] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.733624][ T727] F2FS-fs (loop4): invalid crc value [ 37.744921][ T728] F2FS-fs (loop0): fault_type options not supported [ 37.753181][ T730] F2FS-fs (loop1): fault_injection options not supported [ 37.760698][ T730] F2FS-fs (loop1): fault_type options not supported [ 37.761017][ T733] F2FS-fs (loop3): fault_injection options not supported [ 37.768057][ T730] F2FS-fs (loop1): invalid crc value [ 37.779629][ T728] F2FS-fs (loop0): invalid crc value [ 37.779858][ T733] F2FS-fs (loop3): fault_type options not supported [ 37.793285][ T727] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.800374][ T733] F2FS-fs (loop3): invalid crc value [ 37.806501][ T728] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.813359][ T730] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.831461][ T733] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 733] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 726] <... mount resumed>) = 0 [pid 726] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 728] <... mount resumed>) = 0 [pid 728] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 726] <... openat resumed>) = 5 [pid 728] <... openat resumed>) = 5 [pid 726] chdir("./file4" [pid 728] chdir("./file4" [pid 726] <... chdir resumed>) = 0 [pid 728] <... chdir resumed>) = 0 [pid 726] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 728] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 726] <... openat resumed>) = 6 [pid 726] ioctl(6, LOOP_CLR_FD) = 0 [pid 726] close(6 [pid 728] <... openat resumed>) = 6 [pid 726] <... close resumed>) = 0 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 725] <... futex resumed>) = 0 [pid 728] ioctl(6, LOOP_CLR_FD) = 0 [pid 726] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] close(6 [pid 726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 725] <... futex resumed>) = 0 [pid 726] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 728] <... close resumed>) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... open resumed>) = 6 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 1 [pid 726] <... futex resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 0 [pid 726] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 1 [pid 724] <... futex resumed>) = 1 [pid 728] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 726] fspick(AT_FDCWD, ".", 0) = 7 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... open resumed>) = 6 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] <... futex resumed>) = 0 [pid 726] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 1 [pid 724] <... futex resumed>) = 0 [pid 728] fspick(AT_FDCWD, ".", 0 [pid 726] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 37.850333][ T726] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 37.857177][ T726] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.866669][ T728] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 37.873671][ T728] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... fspick resumed>) = 7 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 728] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 725] <... futex resumed>) = 0 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 728] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... futex resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 726] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 728] <... futex resumed>) = 1 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] <... futex resumed>) = 1 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 728] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 726] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = 0 [pid 728] <... open resumed>) = 8 [pid 726] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 1 [pid 726] <... futex resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 726] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 1 [pid 724] <... futex resumed>) = 0 [pid 726] sendfile(6, 6, NULL, 281483568746501 [pid 728] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 728] <... futex resumed>) = 1 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... futex resumed>) = 0 [pid 728] sendfile(6, 6, NULL, 281483568746501 [pid 726] <... futex resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... futex resumed>) = 0 [pid 728] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 1 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 0 [pid 726] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] <... sendto resumed>) = 36 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] recvfrom(3, [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 0 [pid 726] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=725}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 724] <... futex resumed>) = 1 [pid 728] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... sendto resumed>) = 36 [pid 726] <... futex resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 728] recvfrom(3, [pid 726] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=724}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 725] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = 1 [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] <... futex resumed>) = 0 [pid 728] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 728] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = 1 [pid 728] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 728] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 724] <... futex resumed>) = 0 [pid 728] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 724] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 728] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 724] <... futex resumed>) = 0 [pid 728] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 728] <... futex resumed>) = 0 [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 728] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 724] exit_group(0 [pid 728] <... futex resumed>) = ? [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... exit_group resumed>) = ? [pid 728] +++ exited with 0 +++ [pid 726] <... futex resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 724] +++ exited with 0 +++ [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=724, si_uid=0, si_status=0, si_utime=4, si_stime=25} --- [pid 725] <... futex resumed>) = 0 [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 727] <... mount resumed>) = 0 [pid 727] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 727] chdir("./file4") = 0 [pid 727] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 727] ioctl(6, LOOP_CLR_FD [pid 726] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 295] <... restart_syscall resumed>) = 0 [pid 295] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [ 37.896772][ T726] F2FS-fs (loop2): switch discard_unit option is not allowed [ 37.905065][ T728] F2FS-fs (loop0): switch discard_unit option is not allowed [ 37.927211][ T727] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 37.934177][ T727] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.942096][ T730] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [pid 295] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./13/binderfs") = 0 [pid 295] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 727] <... ioctl resumed>) = 0 [pid 727] close(6) = 0 [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 727] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 725] <... futex resumed>) = 0 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 0 [pid 726] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 1 [pid 726] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 726] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 725] <... futex resumed>) = 0 [pid 726] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 725] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 725] <... futex resumed>) = 0 [pid 726] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 726] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 725] exit_group(0 [pid 726] <... futex resumed>) = ? [pid 725] <... exit_group resumed>) = ? [pid 726] +++ exited with 0 +++ [pid 725] +++ exited with 0 +++ [pid 730] <... mount resumed>) = 0 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 730] chdir("./file4") = 0 [pid 730] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 730] ioctl(6, LOOP_CLR_FD) = 0 [pid 730] close(6) = 0 [pid 727] <... futex resumed>) = 0 [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=725, si_uid=0, si_status=0, si_utime=5, si_stime=18} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 297] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 727] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 727] <... open resumed>) = 6 [pid 730] <... futex resumed>) = 1 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 727] fspick(AT_FDCWD, ".", 0) = 7 [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 727] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 729] <... futex resumed>) = 0 [pid 297] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 729] <... futex resumed>) = 1 [pid 297] newfstatat(AT_FDCWD, "./14/binderfs", [pid 730] <... futex resumed>) = 0 [pid 730] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 727] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 727] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 727] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 727] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 727] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 727] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=723}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 727] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 727] <... futex resumed>) = 1 [pid 727] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 727] <... futex resumed>) = 1 [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 727] <... futex resumed>) = 1 [pid 727] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 723] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 723] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 727] <... futex resumed>) = 1 [pid 727] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 727] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] exit_group(0 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 727] <... futex resumed>) = 1 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] unlink("./14/binderfs" [pid 729] <... futex resumed>) = 1 [pid 730] <... futex resumed>) = 0 [pid 723] <... exit_group resumed>) = ? [pid 730] fspick(AT_FDCWD, ".", 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... unlink resumed>) = 0 [pid 730] <... fspick resumed>) = 7 [pid 297] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 730] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 727] +++ exited with 0 +++ [pid 723] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=723, si_uid=0, si_status=0, si_utime=6, si_stime=22} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./13/binderfs") = 0 [ 37.949170][ T730] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.969764][ T727] F2FS-fs (loop4): switch discard_unit option is not allowed [ 37.977311][ T733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.985917][ T730] F2FS-fs (loop1): switch discard_unit option is not allowed [pid 299] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 730] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 730] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... open resumed>) = 8 [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 730] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 730] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 730] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 730] <... sendto resumed>) = 36 [pid 730] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=729}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 733] <... mount resumed>) = 0 [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] <... futex resumed>) = 0 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 730] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 730] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 733] <... openat resumed>) = 5 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] chdir("./file4" [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] <... chdir resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 730] <... futex resumed>) = 0 [pid 730] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 733] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 733] <... openat resumed>) = 6 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] ioctl(6, LOOP_CLR_FD [pid 730] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 733] <... ioctl resumed>) = 0 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 733] close(6 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 733] <... close resumed>) = 0 [pid 730] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = 1 [pid 730] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 733] <... futex resumed>) = 1 [pid 732] <... futex resumed>) = 0 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 729] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] <... futex resumed>) = 0 [pid 730] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 729] <... futex resumed>) = 1 [pid 730] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 730] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 730] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 733] <... open resumed>) = 6 [pid 729] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] exit_group(0 [pid 733] <... futex resumed>) = 1 [pid 732] <... futex resumed>) = 0 [pid 729] <... exit_group resumed>) = ? [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 730] <... futex resumed>) = ? [pid 732] <... futex resumed>) = 0 [pid 730] +++ exited with 0 +++ [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 729] +++ exited with 0 +++ [pid 733] fspick(AT_FDCWD, ".", 0 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=729, si_uid=0, si_status=0, si_utime=5, si_stime=17} --- [pid 733] <... fspick resumed>) = 7 [pid 296] restart_syscall(<... resuming interrupted clone ...> [ 38.004970][ T733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 296] <... restart_syscall resumed>) = 0 [pid 296] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./13/binderfs") = 0 [pid 296] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 733] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] <... futex resumed>) = 1 [pid 733] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 733] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=732}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 733] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 733] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 733] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 732] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 733] <... futex resumed>) = 1 [pid 733] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 733] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 732] <... futex resumed>) = 0 [pid 732] exit_group(0) = ? [pid 733] <... futex resumed>) = ? [pid 733] +++ exited with 0 +++ [pid 732] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=732, si_uid=0, si_status=0, si_utime=3, si_stime=25} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./14/binderfs") = 0 [ 38.046058][ T733] F2FS-fs (loop3): switch discard_unit option is not allowed [pid 298] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = 0 [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./14/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./14/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] close(4) = 0 [pid 297] rmdir("./14/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./14") = 0 [pid 297] mkdir("./15", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./13/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./13/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./13/file4" [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... rmdir resumed>) = 0 [pid 295] getdents64(3, [pid 299] <... umount2 resumed>) = 0 [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3 [pid 299] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... close resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] rmdir("./13") = 0 [pid 299] newfstatat(AT_FDCWD, "./13/file4", [pid 295] mkdir("./14", 0777 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 299] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./13/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 4 [pid 295] ioctl(3, LOOP_CLR_FD [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] getdents64(4, [pid 295] close(3 [pid 299] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] <... close resumed>) = 0 [pid 299] getdents64(4, [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4./strace-static-x86_64: Process 754 attached ) = 0 [pid 295] <... clone resumed>, child_tidptr=0x55558ce1a690) = 754 [pid 299] rmdir("./13/file4" [pid 754] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 754] chdir("./14" [pid 299] getdents64(3, [pid 754] <... chdir resumed>) = 0 [pid 299] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 754] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] close(3 [pid 754] <... prctl resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 754] setpgid(0, 0 [pid 299] rmdir("./13" [pid 754] <... setpgid resumed>) = 0 [pid 299] <... rmdir resumed>) = 0 [pid 754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] mkdir("./14", 0777) = 0 [pid 754] <... openat resumed>) = 3 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 754] write(3, "1000", 4 [pid 299] <... openat resumed>) = 3 [pid 754] <... write resumed>) = 4 [pid 299] ioctl(3, LOOP_CLR_FD [pid 754] close(3 [pid 299] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 754] <... close resumed>) = 0 [pid 299] close(3 [pid 754] symlink("/dev/binderfs", "./binderfs" [pid 299] <... close resumed>) = 0 executing program [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 754] <... symlink resumed>) = 0 [pid 754] write(1, "executing program\n", 18) = 18 [pid 299] <... clone resumed>, child_tidptr=0x55558ce1a690) = 755 [pid 754] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 754] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 754] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 754] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 297] <... clone resumed>, child_tidptr=0x55558ce1a690) = 756 [pid 754] <... clone3 resumed> => {parent_tid=[757]}, 88) = 757 [pid 754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 756 attached ./strace-static-x86_64: Process 757 attached [pid 757] set_robust_list(0x7f75466579a0, 24 [pid 756] set_robust_list(0x55558ce1a6a0, 24 [pid 757] <... set_robust_list resumed>) = 0 [pid 756] <... set_robust_list resumed>) = 0 [pid 757] rt_sigprocmask(SIG_SETMASK, [], [pid 756] chdir("./15" [pid 757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 756] <... chdir resumed>) = 0 [pid 757] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 756] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 757] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 756] <... prctl resumed>) = 0 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 756] setpgid(0, 0 [pid 754] <... futex resumed>) = 0 [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] <... setpgid resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] bpf(BPF_MAP_CREATE, NULL, 0 [pid 756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 754] <... futex resumed>) = 0 [pid 757] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 756] <... openat resumed>) = 3 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] write(3, "1000", 4 [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] <... futex resumed>) = 0 [pid 756] <... write resumed>) = 4 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 756] close(3 [pid 754] <... futex resumed>) = 0 [pid 757] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 756] <... close resumed>) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] symlink("/dev/binderfs", "./binderfs" [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] <... futex resumed>) = 0 executing program [pid 757] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 756] <... symlink resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 756] write(1, "executing program\n", 18 [pid 754] <... futex resumed>) = 0 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... write resumed>) = 18 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] <... futex resumed>) = 0 [pid 756] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 757] <... futex resumed>) = 0 [pid 756] <... rt_sigaction resumed>NULL, 8) = 0 [pid 754] <... futex resumed>) = 1 [pid 757] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 756] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 757] <... futex resumed>) = 1 [pid 754] <... futex resumed>) = 0 [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] <... mmap resumed>) = 0x7f7546637000 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 754] <... futex resumed>) = 0 [pid 757] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 756] <... mprotect resumed>) = 0 [pid 757] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] rt_sigprocmask(SIG_BLOCK, ~[], [pid 757] <... futex resumed>) = 1 [pid 756] <... rt_sigprocmask resumed>[], 8) = 0 [pid 754] <... futex resumed>) = 0 [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 754] <... futex resumed>) = 0 [pid 756] <... clone3 resumed> => {parent_tid=[758]}, 88) = 758 [pid 757] <... socket resumed>) = 3 [pid 756] rt_sigprocmask(SIG_SETMASK, [], [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] <... futex resumed>) = 0 [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 755 attached [pid 757] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 756] <... futex resumed>) = 0 [pid 754] <... futex resumed>) = 0 [pid 757] <... bpf resumed>) = 4 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] set_robust_list(0x55558ce1a6a0, 24 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 754] <... futex resumed>) = 0 [pid 757] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 754] <... futex resumed>) = 0 [pid 757] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 754] <... futex resumed>) = 0 [pid 757] <... sendmsg resumed>) = 20 [pid 755] <... set_robust_list resumed>) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] chdir("./14" [pid 754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 757] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 758 attached [pid 758] set_robust_list(0x7f75466579a0, 24 [pid 757] memfd_create("syzkaller", 0 [pid 755] <... chdir resumed>) = 0 [pid 754] <... futex resumed>) = 0 [pid 758] <... set_robust_list resumed>) = 0 [pid 757] <... memfd_create resumed>) = 5 [pid 755] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 758] rt_sigprocmask(SIG_SETMASK, [], [pid 757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 758] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 757] <... mmap resumed>) = 0x7f753e237000 [pid 755] <... prctl resumed>) = 0 [pid 755] setpgid(0, 0) = 0 [pid 755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 755] write(3, "1000", 4) = 4 [pid 755] close(3) = 0 [pid 755] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 755] write(1, "executing program\n", 18) = 18 [pid 755] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 755] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 755] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 755] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[759]}, 88) = 759 [pid 755] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... umount2 resumed>) = 0 [pid 758] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 296] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./13/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./13/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 758] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 298] <... umount2 resumed>) = 0 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 756] <... futex resumed>) = 0 [pid 298] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 758] bpf(BPF_MAP_CREATE, NULL, 0 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 758] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(AT_FDCWD, "./14/file4", [pid 296] openat(AT_FDCWD, "./13/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 758] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] <... openat resumed>) = 4 [pid 758] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 296] newfstatat(4, "", [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 298] openat(AT_FDCWD, "./14/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 758] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... openat resumed>) = 4 [pid 758] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(4, "", [pid 296] getdents64(4, [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 758] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 298] getdents64(4, [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 759 attached ) = 1 [pid 756] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 759] set_robust_list(0x7f75466579a0, 24 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(4, [pid 759] <... set_robust_list resumed>) = 0 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] getdents64(4, [pid 759] rt_sigprocmask(SIG_SETMASK, [], [pid 758] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] close(4 [pid 296] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 758] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 298] <... close resumed>) = 0 [pid 296] close(4 [pid 759] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] rmdir("./14/file4" [pid 296] <... close resumed>) = 0 [pid 759] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 296] rmdir("./13/file4" [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(3, [pid 296] <... rmdir resumed>) = 0 [pid 759] <... futex resumed>) = 1 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 755] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] getdents64(3, [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] close(3 [pid 296] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 758] <... socket resumed>) = 3 [pid 755] <... futex resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 296] close(3 [pid 759] bpf(BPF_MAP_CREATE, NULL, 0 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] rmdir("./14" [pid 296] <... close resumed>) = 0 [pid 759] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 296] rmdir("./13" [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] mkdir("./15", 0777 [pid 296] <... rmdir resumed>) = 0 [pid 759] <... futex resumed>) = 1 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 755] <... futex resumed>) = 0 [pid 296] mkdir("./14", 0777 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... mkdir resumed>) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 758] <... bpf resumed>) = 4 [pid 755] <... futex resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 759] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... openat resumed>) = 3 [pid 296] <... openat resumed>) = 3 [pid 759] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 298] ioctl(3, LOOP_CLR_FD [pid 296] ioctl(3, LOOP_CLR_FD [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 759] <... futex resumed>) = 1 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 755] <... futex resumed>) = 0 [pid 298] close(3 [pid 296] close(3 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 758] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 755] <... futex resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 759] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55558ce1a690) = 761 [pid 296] <... clone resumed>, child_tidptr=0x55558ce1a690) = 762 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] <... futex resumed>) = 1 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 755] <... futex resumed>) = 0 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 761 attached [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 758] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 755] <... futex resumed>) = 0 [pid 761] set_robust_list(0x55558ce1a6a0, 24 [pid 759] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... set_robust_list resumed>) = 0 [pid 759] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] chdir("./15" [pid 759] <... futex resumed>) = 1 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 755] <... futex resumed>) = 0 [pid 761] <... chdir resumed>) = 0 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 758] <... sendmsg resumed>) = 20 [pid 755] <... futex resumed>) = 0 [pid 761] <... prctl resumed>) = 0 [pid 759] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] setpgid(0, 0 [pid 759] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 761] <... setpgid resumed>) = 0 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 759] <... futex resumed>) = 1 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 755] <... futex resumed>) = 0 [pid 761] <... openat resumed>) = 3 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] memfd_create("syzkaller", 0 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 762 attached [pid 761] write(3, "1000", 4 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 758] <... memfd_create resumed>) = 5 [pid 755] <... futex resumed>) = 0 [pid 762] set_robust_list(0x55558ce1a6a0, 24 [pid 761] <... write resumed>) = 4 [pid 759] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 762] <... set_robust_list resumed>) = 0 [pid 761] close(3 [pid 759] <... socket resumed>) = 3 [pid 758] <... mmap resumed>) = 0x7f753e237000 [pid 762] chdir("./14" [pid 761] <... close resumed>) = 0 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... chdir resumed>) = 0 [pid 759] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 0 [pid 762] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... prctl resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] <... futex resumed>) = 0 [pid 762] setpgid(0, 0 [pid 759] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 762] <... setpgid resumed>) = 0 [pid 759] <... bpf resumed>) = 4 [pid 762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... openat resumed>) = 3 [pid 759] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 0 [pid 762] write(3, "1000", 4 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... write resumed>) = 4 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] <... futex resumed>) = 0 [pid 762] close(3 [pid 759] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 762] <... close resumed>) = 0 [pid 761] symlink("/dev/binderfs", "./binderfs" [pid 759] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 762] symlink("/dev/binderfs", "./binderfs" [pid 761] <... symlink resumed>) = 0 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 762] <... symlink resumed>) = 0 [pid 761] write(1, "executing program\n", 18 [pid 759] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 0 executing program [pid 762] write(1, "executing program\n", 18 [pid 761] <... write resumed>) = 18 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... write resumed>) = 18 [pid 761] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 759] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 762] <... futex resumed>) = 0 [pid 761] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 759] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 762] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 761] <... rt_sigaction resumed>NULL, 8) = 0 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... rt_sigaction resumed>NULL, 8) = 0 [pid 761] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 759] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 0 [pid 762] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 761] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] <... futex resumed>) = 0 [pid 762] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 761] <... mmap resumed>) = 0x7f7546637000 [pid 759] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 762] <... mmap resumed>) = 0x7f7546637000 [pid 761] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 759] <... sendmsg resumed>) = 20 [pid 762] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 761] <... mprotect resumed>) = 0 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... mprotect resumed>) = 0 [pid 761] rt_sigprocmask(SIG_BLOCK, ~[], [pid 759] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 0 [pid 762] rt_sigprocmask(SIG_BLOCK, ~[], [pid 761] <... rt_sigprocmask resumed>[], 8) = 0 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... rt_sigprocmask resumed>[], 8) = 0 [pid 761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] <... futex resumed>) = 0 [pid 762] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 759] memfd_create("syzkaller", 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 761] <... clone3 resumed> => {parent_tid=[763]}, 88) = 763 [pid 759] <... memfd_create resumed>) = 5 [pid 762] <... clone3 resumed> => {parent_tid=[764]}, 88) = 764 [pid 761] rt_sigprocmask(SIG_SETMASK, [], [pid 759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 762] rt_sigprocmask(SIG_SETMASK, [], [pid 761] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 759] <... mmap resumed>) = 0x7f753e237000 ./strace-static-x86_64: Process 763 attached [pid 762] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] set_robust_list(0x7f75466579a0, 24 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 763] <... set_robust_list resumed>) = 0 [pid 762] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] rt_sigprocmask(SIG_SETMASK, [], [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 763] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] <... futex resumed>) = 0 [pid 763] bpf(BPF_MAP_CREATE, NULL, 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] <... futex resumed>) = 0 [pid 763] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] <... futex resumed>) = 0 [pid 763] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] <... futex resumed>) = 0 [pid 763] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... bpf resumed>) = -1 EFAULT (Bad address) ./strace-static-x86_64: Process 764 attached [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] set_robust_list(0x7f75466579a0, 24 [pid 763] <... futex resumed>) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] <... futex resumed>) = 0 [pid 763] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 764] <... set_robust_list resumed>) = 0 [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] rt_sigprocmask(SIG_SETMASK, [], [pid 763] <... futex resumed>) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] <... futex resumed>) = 0 [pid 763] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 763] <... socket resumed>) = 3 [pid 764] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 763] <... futex resumed>) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] <... futex resumed>) = 0 [pid 763] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... bpf resumed>) = 4 [pid 764] <... futex resumed>) = 1 [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 764] bpf(BPF_MAP_CREATE, NULL, 0 [pid 763] <... futex resumed>) = 1 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 764] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 764] <... futex resumed>) = 0 [pid 763] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 762] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 763] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 1 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 764] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 762] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 764] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 763] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] <... futex resumed>) = 1 [pid 762] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 0 [pid 764] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 763] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 763] <... sendmsg resumed>) = 20 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 763] <... futex resumed>) = 1 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 763] memfd_create("syzkaller", 0 [pid 761] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] <... memfd_create resumed>) = 5 [pid 762] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 764] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 763] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] <... mmap resumed>) = 0x7f753e237000 [pid 762] <... futex resumed>) = 0 [pid 764] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... socket resumed>) = 3 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 762] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] <... futex resumed>) = 0 [pid 764] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... bpf resumed>) = 4 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 762] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] <... futex resumed>) = 0 [pid 764] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 762] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] <... futex resumed>) = 0 [pid 764] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 764] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 762] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] <... futex resumed>) = 0 [pid 764] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... sendmsg resumed>) = 20 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 762] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 762] <... futex resumed>) = 0 [pid 764] memfd_create("syzkaller", 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 764] <... memfd_create resumed>) = 5 [pid 764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 757] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 764] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 758] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 763] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 759] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 764] <... write resumed>) = 20699119 [pid 764] munmap(0x7f753e237000, 138412032) = 0 [pid 764] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 764] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 764] close(5) = 0 [pid 764] close(6) = 0 [pid 764] mkdir("./file4", 0777) = 0 [pid 764] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 757] <... write resumed>) = 20699119 [pid 757] munmap(0x7f753e237000, 138412032) = 0 [pid 757] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 757] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 757] close(5) = 0 [pid 757] close(6 [pid 758] <... write resumed>) = 20699119 [ 38.625480][ T764] loop1: detected capacity change from 0 to 40427 [ 38.649956][ T764] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 38.660641][ T757] loop0: detected capacity change from 0 to 40427 [ 38.667062][ T764] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 758] munmap(0x7f753e237000, 138412032) = 0 [pid 758] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 758] ioctl(6, LOOP_SET_FD, 5 [pid 759] <... write resumed>) = 20699119 [pid 758] <... ioctl resumed>) = 0 [pid 759] munmap(0x7f753e237000, 138412032 [pid 758] close(5 [pid 759] <... munmap resumed>) = 0 [pid 758] <... close resumed>) = 0 [pid 758] close(6 [pid 759] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 759] ioctl(6, LOOP_SET_FD, 5 [pid 763] <... write resumed>) = 20699119 [pid 763] munmap(0x7f753e237000, 138412032) = 0 [pid 763] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 759] <... ioctl resumed>) = 0 [pid 763] ioctl(6, LOOP_SET_FD, 5 [pid 759] close(5 [pid 757] <... close resumed>) = 0 [pid 757] mkdir("./file4", 0777) = 0 [pid 757] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 763] <... ioctl resumed>) = 0 [pid 759] <... close resumed>) = 0 [pid 759] close(6 [pid 763] close(5) = 0 [ 38.685046][ T764] F2FS-fs (loop1): fault_injection options not supported [ 38.694214][ T758] loop2: detected capacity change from 0 to 40427 [ 38.702693][ T764] F2FS-fs (loop1): fault_type options not supported [ 38.711482][ T759] loop4: detected capacity change from 0 to 40427 [ 38.718064][ T764] F2FS-fs (loop1): invalid crc value [ 38.718576][ T763] loop3: detected capacity change from 0 to 40427 [pid 763] close(6 [pid 758] <... close resumed>) = 0 [pid 758] mkdir("./file4", 0777) = 0 [pid 758] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 763] <... close resumed>) = 0 [pid 759] <... close resumed>) = 0 [pid 763] mkdir("./file4", 0777 [pid 759] mkdir("./file4", 0777 [pid 763] <... mkdir resumed>) = 0 [pid 759] <... mkdir resumed>) = 0 [pid 763] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [ 38.725091][ T757] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 38.736347][ T757] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 38.743882][ T764] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.744699][ T757] F2FS-fs (loop0): fault_injection options not supported [ 38.757434][ T757] F2FS-fs (loop0): fault_type options not supported [ 38.767494][ T758] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 38.776190][ T758] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 38.785070][ T757] F2FS-fs (loop0): invalid crc value [ 38.785125][ T763] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 38.790776][ T758] F2FS-fs (loop2): fault_injection options not supported [ 38.810478][ T763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 38.818462][ T759] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 38.826312][ T763] F2FS-fs (loop3): fault_injection options not supported [ 38.833405][ T759] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 38.835020][ T764] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 38.841760][ T763] F2FS-fs (loop3): fault_type options not supported [ 38.848777][ T764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.854898][ T759] F2FS-fs (loop4): fault_injection options not supported [ 38.863547][ T757] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.869779][ T759] F2FS-fs (loop4): fault_type options not supported [pid 759] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 764] <... mount resumed>) = 0 [pid 764] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 764] chdir("./file4") = 0 [pid 764] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 764] ioctl(6, LOOP_CLR_FD) = 0 [pid 764] close(6) = 0 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 762] <... futex resumed>) = 0 [pid 764] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... open resumed>) = 6 [pid 762] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 0 [pid 762] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 764] fspick(AT_FDCWD, ".", 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 764] <... fspick resumed>) = 7 [pid 762] <... futex resumed>) = 0 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 0 [pid 762] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 764] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [pid 764] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [ 38.875643][ T758] F2FS-fs (loop2): fault_type options not supported [ 38.888283][ T763] F2FS-fs (loop3): invalid crc value [ 38.893535][ T759] F2FS-fs (loop4): invalid crc value [ 38.898294][ T764] F2FS-fs (loop1): switch discard_unit option is not allowed [ 38.905641][ T758] F2FS-fs (loop2): invalid crc value [ 38.912579][ T759] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.914472][ T764] handle_bad_sector: 65 callbacks suppressed [ 38.914489][ T764] attempt to access beyond end of device [ 38.914489][ T764] loop1: rw=2049, want=53256, limit=40427 [pid 764] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [pid 764] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [pid 764] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 764] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=762}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [pid 764] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 764] <... futex resumed>) = 1 [pid 764] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 764] <... futex resumed>) = 1 [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 764] <... futex resumed>) = 1 [pid 764] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 762] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 764] <... futex resumed>) = 1 [pid 764] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 764] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 762] <... futex resumed>) = 0 [pid 762] exit_group(0) = ? [pid 764] <... futex resumed>) = ? [pid 764] +++ exited with 0 +++ [pid 762] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=762, si_uid=0, si_status=0, si_utime=7, si_stime=20} --- [ 38.947224][ T763] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.957992][ T758] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.959489][ T764] attempt to access beyond end of device [ 38.959489][ T764] loop1: rw=0, want=53256, limit=40427 [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 296] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./14/binderfs") = 0 [pid 296] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 757] <... mount resumed>) = 0 [pid 757] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 757] chdir("./file4") = 0 [pid 757] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 757] ioctl(6, LOOP_CLR_FD) = 0 [pid 757] close(6) = 0 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] <... futex resumed>) = 0 [pid 757] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] fspick(AT_FDCWD, ".", 0) = 7 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 757] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 38.992433][ T757] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 39.002276][ T296] attempt to access beyond end of device [ 39.002276][ T296] loop1: rw=2049, want=45104, limit=40427 [ 39.015686][ T757] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.031435][ T759] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... mount resumed>) = 0 [pid 759] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 759] chdir("./file4") = 0 [pid 759] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 759] ioctl(6, LOOP_CLR_FD) = 0 [pid 759] close(6) = 0 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] fspick(AT_FDCWD, ".", 0) = 7 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 757] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 759] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [ 39.042919][ T757] F2FS-fs (loop0): switch discard_unit option is not allowed [ 39.050767][ T759] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 39.062347][ T763] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 39.069197][ T763] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.079740][ T759] F2FS-fs (loop4): switch discard_unit option is not allowed [ 39.082586][ T758] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 759] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = 0 [pid 754] <... futex resumed>) = 1 [pid 763] <... mount resumed>) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 758] <... mount resumed>) = 0 [pid 763] <... openat resumed>) = 5 [pid 759] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 758] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 757] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 763] chdir("./file4" [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... openat resumed>) = 5 [pid 763] <... chdir resumed>) = 0 [pid 759] <... futex resumed>) = 1 [pid 758] chdir("./file4" [pid 763] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 758] <... chdir resumed>) = 0 [pid 763] <... openat resumed>) = 6 [pid 758] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 763] ioctl(6, LOOP_CLR_FD [pid 758] <... openat resumed>) = 6 [pid 763] <... ioctl resumed>) = 0 [pid 758] ioctl(6, LOOP_CLR_FD [pid 763] close(6 [pid 758] <... ioctl resumed>) = 0 [pid 763] <... close resumed>) = 0 [pid 758] close(6 [pid 757] <... open resumed>) = 8 [pid 755] <... futex resumed>) = 0 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 1 [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... close resumed>) = 0 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 1 [pid 761] <... futex resumed>) = 0 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 761] <... futex resumed>) = 0 [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 754] <... futex resumed>) = 1 [pid 757] <... futex resumed>) = 0 [pid 763] <... open resumed>) = 6 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 757] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 758] <... open resumed>) = 6 [pid 756] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] <... futex resumed>) = 0 [pid 758] <... futex resumed>) = 0 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] fspick(AT_FDCWD, ".", 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... fspick resumed>) = 7 [pid 758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] fspick(AT_FDCWD, ".", 0 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... futex resumed>) = 1 [pid 761] <... futex resumed>) = 0 [pid 758] <... fspick resumed>) = 7 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] <... futex resumed>) = 0 [pid 763] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [ 39.092131][ T759] attempt to access beyond end of device [ 39.092131][ T759] loop4: rw=2049, want=53256, limit=40427 [ 39.094075][ T758] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.117525][ T757] attempt to access beyond end of device [ 39.117525][ T757] loop0: rw=2049, want=53256, limit=40427 [ 39.131389][ T763] F2FS-fs (loop3): switch discard_unit option is not allowed [ 39.132532][ T759] attempt to access beyond end of device [pid 759] sendfile(6, 6, NULL, 281483568746501 [pid 763] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 758] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 759] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 759] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=755}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 1 [pid 759] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 756] <... futex resumed>) = 0 [pid 754] <... futex resumed>) = 0 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... futex resumed>) = 0 [pid 754] <... futex resumed>) = 1 [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] <... futex resumed>) = 1 [pid 758] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 757] sendfile(6, 6, NULL, 281483568746501 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... futex resumed>) = 1 [pid 763] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... futex resumed>) = 1 [pid 763] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 759] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 759] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 758] <... futex resumed>) = 1 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 759] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 0 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] <... futex resumed>) = 0 [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 759] <... futex resumed>) = 0 [pid 755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] <... futex resumed>) = 0 [pid 759] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 759] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 755] <... futex resumed>) = 0 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 755] <... futex resumed>) = 0 [pid 759] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 755] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 759] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 759] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 755] <... futex resumed>) = 0 [pid 759] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] exit_group(0 [pid 759] <... futex resumed>) = ? [pid 755] <... exit_group resumed>) = ? [pid 759] +++ exited with 0 +++ [pid 756] <... futex resumed>) = 0 [pid 755] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=755, si_uid=0, si_status=0, si_utime=5, si_stime=24} --- [pid 763] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] <... futex resumed>) = 0 [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] <... futex resumed>) = 0 [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = 1 [pid 754] <... futex resumed>) = 1 [pid 761] <... futex resumed>) = 1 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] <... futex resumed>) = 0 [pid 758] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 756] <... futex resumed>) = 0 [ 39.132532][ T759] loop4: rw=0, want=53256, limit=40427 [ 39.149794][ T758] F2FS-fs (loop2): switch discard_unit option is not allowed [ 39.158412][ T757] attempt to access beyond end of device [ 39.158412][ T757] loop0: rw=0, want=53256, limit=40427 [ 39.159540][ T763] attempt to access beyond end of device [ 39.159540][ T763] loop3: rw=2049, want=53256, limit=40427 [ 39.188449][ T758] attempt to access beyond end of device [pid 758] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./14/binderfs") = 0 [pid 299] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 763] <... futex resumed>) = 0 [pid 763] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 757] <... futex resumed>) = 0 [pid 757] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 757] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=754}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 757] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 1 [pid 761] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 757] <... futex resumed>) = 1 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 763] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... sendto resumed>) = 36 [pid 757] <... futex resumed>) = 1 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 757] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] <... futex resumed>) = 0 [pid 754] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 754] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 757] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 763] recvfrom(3, [pid 757] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 763] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=761}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 757] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 754] <... futex resumed>) = 0 [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 757] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 754] exit_group(0 [pid 763] <... futex resumed>) = 1 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] <... futex resumed>) = 0 [pid 757] <... futex resumed>) = ? [pid 754] <... exit_group resumed>) = ? [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 1 [pid 763] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 763] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 761] <... futex resumed>) = 0 [pid 757] +++ exited with 0 +++ [pid 754] +++ exited with 0 +++ [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=754, si_uid=0, si_status=0, si_utime=5, si_stime=23} --- [pid 763] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 761] <... futex resumed>) = 0 [pid 758] sendfile(6, 6, NULL, 281483568746501 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 756] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 763] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 758] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 763] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 761] <... futex resumed>) = 0 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 761] <... futex resumed>) = 0 [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 761] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 756] <... futex resumed>) = 0 [pid 763] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 758] <... sendto resumed>) = 36 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 763] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] recvfrom(3, [pid 295] <... restart_syscall resumed>) = 0 [pid 763] <... futex resumed>) = 1 [pid 761] <... futex resumed>) = 0 [pid 758] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=756}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 763] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 761] exit_group(0 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... umount2 resumed>) = 0 [pid 763] <... futex resumed>) = ? [pid 761] <... exit_group resumed>) = ? [pid 758] <... futex resumed>) = 1 [pid 756] <... futex resumed>) = 0 [pid 295] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 763] +++ exited with 0 +++ [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", [pid 761] +++ exited with 0 +++ [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 758] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 756] <... futex resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=761, si_uid=0, si_status=0, si_utime=8, si_stime=21} --- [pid 295] getdents64(3, [pid 758] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 758] <... futex resumed>) = 0 [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 758] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 756] <... futex resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./14/binderfs", [pid 758] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 296] newfstatat(AT_FDCWD, "./14/file4", [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./14/binderfs" [pid 758] <... futex resumed>) = 0 [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... unlink resumed>) = 0 [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = 0 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 758] <... futex resumed>) = 0 [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 296] openat(AT_FDCWD, "./14/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./14/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./14") = 0 [pid 296] mkdir("./15", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... restart_syscall resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 3 [pid 296] <... clone resumed>, child_tidptr=0x55558ce1a690) = 785 [pid 758] <... futex resumed>) = 0 [pid 756] <... futex resumed>) = 1 [pid 298] newfstatat(3, "", [pid 758] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 758] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./15/binderfs") = 0 [ 39.188449][ T758] loop2: rw=2049, want=53256, limit=40427 [ 39.203826][ T299] attempt to access beyond end of device [ 39.203826][ T299] loop4: rw=2049, want=45104, limit=40427 [pid 298] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 758] <... futex resumed>) = 1 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] <... futex resumed>) = 0 [pid 756] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] <... futex resumed>) = 0 [pid 756] <... futex resumed>) = 1 [pid 758] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 756] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 758] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 758] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 756] <... futex resumed>) = 0 [pid 758] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 756] exit_group(0 [pid 758] <... futex resumed>) = ? [pid 756] <... exit_group resumed>) = ? [pid 758] +++ exited with 0 +++ [pid 756] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=756, si_uid=0, si_status=0, si_utime=7, si_stime=18} --- [pid 297] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 785 attached ) = 0 [pid 297] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./15/binderfs" [pid 785] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 785] chdir("./15") = 0 [pid 785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 785] setpgid(0, 0) = 0 [pid 785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] <... unlink resumed>) = 0 [pid 785] <... openat resumed>) = 3 [pid 297] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 785] write(3, "1000", 4) = 4 [pid 785] close(3) = 0 [pid 785] symlink("/dev/binderfs", "./binderfs") = 0 [pid 785] write(1, "executing program\n", 18executing program ) = 18 [pid 785] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 785] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 785] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 785] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[787]}, 88) = 787 [pid 785] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 787 attached [pid 787] set_robust_list(0x7f75466579a0, 24) = 0 [pid 787] rt_sigprocmask(SIG_SETMASK, [], [pid 785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 787] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 787] <... futex resumed>) = 0 [pid 787] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 787] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 0 [pid 787] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 787] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 787] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 785] <... futex resumed>) = 0 [pid 787] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 785] <... futex resumed>) = 0 [pid 787] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 785] <... futex resumed>) = 0 [pid 787] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 785] <... futex resumed>) = 0 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 785] <... futex resumed>) = 0 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... socket resumed>) = 3 [pid 785] <... futex resumed>) = 0 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... bpf resumed>) = 4 [pid 785] <... futex resumed>) = 0 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 785] <... futex resumed>) = 0 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 785] <... futex resumed>) = 0 [pid 787] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 785] <... futex resumed>) = 0 [pid 787] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 787] <... sendmsg resumed>) = 20 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 785] <... futex resumed>) = 0 [pid 787] memfd_create("syzkaller", 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... memfd_create resumed>) = 5 [pid 785] <... futex resumed>) = 0 [pid 787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./15/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./15/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./15/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./15") = 0 [pid 298] mkdir("./16", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 788 ./strace-static-x86_64: Process 788 attached [pid 788] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 788] chdir("./16") = 0 [pid 788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 788] setpgid(0, 0) = 0 [pid 788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 788] write(3, "1000", 4) = 4 [pid 788] close(3) = 0 [pid 788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 788] write(1, "executing program\n", 18) = 18 [pid 788] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 788] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 788] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 788] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[789]}, 88) = 789 [pid 788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 789 attached [pid 789] set_robust_list(0x7f75466579a0, 24) = 0 [pid 789] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 789] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 788] <... futex resumed>) = 1 [pid 789] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 789] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 789] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] <... sendmsg resumed>) = 20 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 789] memfd_create("syzkaller", 0) = 5 [pid 789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./14/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./14/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./14/file4") = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./14") = 0 [pid 299] mkdir("./15", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 790 ./strace-static-x86_64: Process 790 attached [pid 297] <... umount2 resumed>) = 0 [pid 295] <... umount2 resumed>) = 0 [pid 790] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 790] chdir("./15" [pid 295] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 790] <... chdir resumed>) = 0 [pid 790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 790] setpgid(0, 0) = 0 [pid 790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] newfstatat(AT_FDCWD, "./14/file4", [pid 790] <... openat resumed>) = 3 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 790] write(3, "1000", 4) = 4 [pid 790] close(3) = 0 [pid 790] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 295] umount2("./14/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 790] write(1, "executing program\n", 18) = 18 [pid 790] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 297] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 790] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./14/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] newfstatat(AT_FDCWD, "./15/file4", [pid 790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 790] <... mmap resumed>) = 0x7f7546637000 [pid 297] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... openat resumed>) = 4 [pid 790] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(4, "", [pid 790] <... mprotect resumed>) = 0 [pid 297] openat(AT_FDCWD, "./15/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 790] rt_sigprocmask(SIG_BLOCK, ~[], [pid 297] <... openat resumed>) = 4 [pid 295] getdents64(4, [pid 790] <... rt_sigprocmask resumed>[], 8) = 0 [pid 297] newfstatat(4, "", [pid 295] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, [pid 297] getdents64(4, [pid 295] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 790] <... clone3 resumed> => {parent_tid=[791]}, 88) = 791 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] close(4 [pid 790] rt_sigprocmask(SIG_SETMASK, [], [pid 297] getdents64(4, [pid 295] <... close resumed>) = 0 [pid 790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] rmdir("./14/file4" [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] close(4 [pid 790] <... futex resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] rmdir("./15/file4" [pid 295] <... rmdir resumed>) = 0 [pid 297] <... rmdir resumed>) = 0 [pid 295] getdents64(3, [pid 297] getdents64(3, [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3 [pid 297] close(3 [pid 295] <... close resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 295] rmdir("./14" [pid 297] rmdir("./15") = 0 [pid 295] <... rmdir resumed>) = 0 [pid 297] mkdir("./16", 0777 [pid 295] mkdir("./15", 0777 [pid 297] <... mkdir resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 297] <... openat resumed>) = 3 [pid 295] <... openat resumed>) = 3 [pid 295] ioctl(3, LOOP_CLR_FD [pid 297] ioctl(3, LOOP_CLR_FD [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] close(3 [pid 297] close(3 [pid 295] <... close resumed>) = 0 ./strace-static-x86_64: Process 791 attached [pid 297] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 792 [pid 791] set_robust_list(0x7f75466579a0, 24 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 791] <... set_robust_list resumed>) = 0 [pid 295] <... clone resumed>, child_tidptr=0x55558ce1a690) = 793 [pid 791] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 791] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] <... futex resumed>) = 0 [pid 787] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 792 attached [pid 792] set_robust_list(0x55558ce1a6a0, 24 [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... set_robust_list resumed>) = 0 [pid 792] chdir("./16" [pid 791] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 792] <... chdir resumed>) = 0 [pid 791] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 792] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] setpgid(0, 0) = 0 [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] <... futex resumed>) = 0 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... openat resumed>) = 3 [pid 791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 791] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148./strace-static-x86_64: Process 793 attached ) = -1 EFAULT (Bad address) [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] set_robust_list(0x55558ce1a6a0, 24 [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] write(3, "1000", 4 [pid 793] <... set_robust_list resumed>) = 0 [pid 792] <... write resumed>) = 4 [pid 791] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 792] close(3 [pid 791] <... socket resumed>) = 3 [pid 792] <... close resumed>) = 0 [pid 792] symlink("/dev/binderfs", "./binderfs" [pid 793] chdir("./15" [pid 792] <... symlink resumed>) = 0 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] write(1, "executing program\n", 18 [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000executing program ) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... write resumed>) = 18 [pid 792] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 792] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 791] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 793] <... chdir resumed>) = 0 [pid 792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 791] <... bpf resumed>) = 4 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] <... futex resumed>) = 0 [pid 793] <... prctl resumed>) = 0 [pid 792] <... mprotect resumed>) = 0 [pid 791] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 793] setpgid(0, 0 [pid 792] rt_sigprocmask(SIG_BLOCK, ~[], [pid 791] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 792] <... rt_sigprocmask resumed>[], 8) = 0 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... setpgid resumed>) = 0 [pid 792] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... clone3 resumed> => {parent_tid=[794]}, 88) = 794 [pid 791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] <... futex resumed>) = 0 [pid 793] <... openat resumed>) = 3 [pid 792] rt_sigprocmask(SIG_SETMASK, [], [pid 791] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 793] write(3, "1000", 4 [pid 792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 791] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... write resumed>) = 4 [pid 791] <... futex resumed>) = 1 [pid 793] close(3 [pid 790] <... futex resumed>) = 0 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... close resumed>) = 0 [pid 791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = 0 [pid 791] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 793] symlink("/dev/binderfs", "./binderfs" [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... sendmsg resumed>) = 20 [pid 793] <... symlink resumed>) = 0 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] write(1, "executing program\n", 18 executing program [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 793] <... write resumed>) = 18 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] <... futex resumed>) = 0 [pid 791] memfd_create("syzkaller", 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 793] <... futex resumed>) = 0 [pid 791] <... memfd_create resumed>) = 5 ./strace-static-x86_64: Process 794 attached [pid 793] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, [pid 791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 794] set_robust_list(0x7f75466579a0, 24 [pid 793] <... rt_sigaction resumed>NULL, 8) = 0 [pid 791] <... mmap resumed>) = 0x7f753e237000 [pid 794] <... set_robust_list resumed>) = 0 [pid 794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 794] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 793] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 794] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 792] <... futex resumed>) = 0 [pid 794] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 792] <... futex resumed>) = 0 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 792] <... futex resumed>) = 0 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... socket resumed>) = 3 [pid 792] <... futex resumed>) = 0 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... bpf resumed>) = 4 [pid 792] <... futex resumed>) = 0 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 792] <... futex resumed>) = 0 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 792] <... futex resumed>) = 0 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 794] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... sendmsg resumed>) = 20 [pid 792] <... futex resumed>) = 0 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 0 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] memfd_create("syzkaller", 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... memfd_create resumed>) = 5 [pid 792] <... futex resumed>) = 0 [pid 794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 794] <... mmap resumed>) = 0x7f753e237000 [pid 793] <... mmap resumed>) = 0x7f7546637000 [pid 793] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 793] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[795]}, 88) = 795 [pid 793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 795 attached [pid 795] set_robust_list(0x7f75466579a0, 24) = 0 [pid 795] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 795] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] bpf(BPF_MAP_CREATE, NULL, 0 [pid 793] <... futex resumed>) = 0 [pid 795] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 795] <... futex resumed>) = 0 [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 793] <... futex resumed>) = 0 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 795] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 795] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 795] <... futex resumed>) = 0 [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 793] <... futex resumed>) = 0 [pid 795] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... socket resumed>) = 3 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... bpf resumed>) = 4 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 795] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... sendmsg resumed>) = 20 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] memfd_create("syzkaller", 0 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 795] <... memfd_create resumed>) = 5 [pid 795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 789] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 787] <... write resumed>) = 20699119 [pid 787] munmap(0x7f753e237000, 138412032) = 0 [pid 787] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 787] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 787] close(5) = 0 [pid 794] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 787] close(6) = 0 [pid 787] mkdir("./file4", 0777) = 0 [pid 787] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [ 39.695948][ T787] loop1: detected capacity change from 0 to 40427 [ 39.713933][ T787] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 39.730089][ T787] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 791] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 39.748588][ T787] F2FS-fs (loop1): fault_injection options not supported [ 39.766492][ T787] F2FS-fs (loop1): fault_type options not supported [ 39.777814][ T787] F2FS-fs (loop1): invalid crc value [pid 795] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 789] <... write resumed>) = 20699119 [pid 789] munmap(0x7f753e237000, 138412032) = 0 [pid 789] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [ 39.798479][ T787] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 789] ioctl(6, LOOP_SET_FD, 5 [pid 794] <... write resumed>) = 20699119 [pid 794] munmap(0x7f753e237000, 138412032) = 0 [pid 794] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 794] ioctl(6, LOOP_SET_FD, 5 [pid 789] <... ioctl resumed>) = 0 [pid 789] close(5) = 0 [pid 789] close(6 [pid 794] <... ioctl resumed>) = 0 [pid 794] close(5) = 0 [ 39.846603][ T789] loop3: detected capacity change from 0 to 40427 [ 39.859564][ T794] loop2: detected capacity change from 0 to 40427 [pid 794] close(6) = 0 [pid 789] <... close resumed>) = 0 [pid 794] mkdir("./file4", 0777 [pid 789] mkdir("./file4", 0777 [pid 787] <... mount resumed>) = 0 [pid 794] <... mkdir resumed>) = 0 [pid 789] <... mkdir resumed>) = 0 [pid 787] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 789] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 794] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 787] <... openat resumed>) = 5 [pid 795] <... write resumed>) = 20699119 [pid 787] chdir("./file4" [pid 795] munmap(0x7f753e237000, 138412032 [pid 787] <... chdir resumed>) = 0 [pid 795] <... munmap resumed>) = 0 [pid 791] <... write resumed>) = 20699119 [pid 787] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 795] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 787] <... openat resumed>) = 6 [pid 795] <... openat resumed>) = 6 [pid 787] ioctl(6, LOOP_CLR_FD [pid 795] ioctl(6, LOOP_SET_FD, 5 [pid 787] <... ioctl resumed>) = 0 [ 39.887541][ T787] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 39.894448][ T787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.912066][ T794] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 39.919547][ T794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.925871][ T795] loop0: detected capacity change from 0 to 40427 [pid 787] close(6) = 0 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 785] <... futex resumed>) = 0 [pid 787] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... open resumed>) = 6 [pid 785] <... futex resumed>) = 0 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] fspick(AT_FDCWD, ".", 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 787] <... fspick resumed>) = 7 [pid 785] <... futex resumed>) = 0 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 0 [pid 785] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 787] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 1 [pid 791] munmap(0x7f753e237000, 138412032 [pid 787] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 1 [pid 787] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 1 [pid 787] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 1 [pid 787] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 787] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=785}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 787] <... futex resumed>) = 1 [pid 787] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 787] <... futex resumed>) = 1 [pid 787] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 787] <... futex resumed>) = 1 [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 787] <... futex resumed>) = 1 [pid 787] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 785] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 787] <... futex resumed>) = 1 [pid 787] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 787] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 785] <... futex resumed>) = 0 [pid 785] exit_group(0) = ? [pid 787] <... futex resumed>) = ? [pid 791] <... munmap resumed>) = 0 [pid 791] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 791] ioctl(6, LOOP_SET_FD, 5 [pid 787] +++ exited with 0 +++ [pid 785] +++ exited with 0 +++ [pid 795] <... ioctl resumed>) = 0 [pid 795] close(5) = 0 [pid 795] close(6 [pid 791] <... ioctl resumed>) = 0 [pid 791] close(5) = 0 [pid 791] close(6 [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=785, si_uid=0, si_status=0, si_utime=2, si_stime=23} --- [pid 296] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 39.928191][ T794] F2FS-fs (loop2): fault_injection options not supported [ 39.935351][ T787] F2FS-fs (loop1): switch discard_unit option is not allowed [ 39.941236][ T794] F2FS-fs (loop2): fault_type options not supported [ 39.956116][ T789] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 39.962266][ T791] loop4: detected capacity change from 0 to 40427 [ 39.969312][ T789] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 39.978425][ T794] F2FS-fs (loop2): invalid crc value [pid 296] unlink("./15/binderfs") = 0 [pid 296] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 795] <... close resumed>) = 0 [pid 791] <... close resumed>) = 0 [pid 795] mkdir("./file4", 0777 [pid 791] mkdir("./file4", 0777 [pid 795] <... mkdir resumed>) = 0 [pid 795] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 791] <... mkdir resumed>) = 0 [ 39.984116][ T789] F2FS-fs (loop3): fault_injection options not supported [ 39.991745][ T789] F2FS-fs (loop3): fault_type options not supported [ 40.001154][ T791] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 40.007923][ T791] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 40.018579][ T789] F2FS-fs (loop3): invalid crc value [ 40.024308][ T794] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.030758][ T791] F2FS-fs (loop4): fault_injection options not supported [ 40.037599][ T791] F2FS-fs (loop4): fault_type options not supported [ 40.045270][ T791] F2FS-fs (loop4): invalid crc value [ 40.055122][ T795] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 40.062751][ T789] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 791] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 794] <... mount resumed>) = 0 [pid 794] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 794] chdir("./file4") = 0 [pid 794] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 794] ioctl(6, LOOP_CLR_FD) = 0 [pid 794] close(6) = 0 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] fspick(AT_FDCWD, ".", 0) = 7 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [ 40.085985][ T795] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.098663][ T794] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.104803][ T795] F2FS-fs (loop0): fault_injection options not supported [ 40.105671][ T794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.120014][ T795] F2FS-fs (loop0): fault_type options not supported [pid 794] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 EINVAL (Invalid argument) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 794] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=792}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 794] <... futex resumed>) = 1 [pid 794] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 794] <... futex resumed>) = 1 [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 794] <... futex resumed>) = 1 [pid 794] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 792] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 794] <... futex resumed>) = 1 [pid 794] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 794] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = 0 [pid 792] exit_group(0) = ? [pid 794] <... futex resumed>) = ? [pid 794] +++ exited with 0 +++ [pid 792] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=792, si_uid=0, si_status=0, si_utime=5, si_stime=19} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 296] <... umount2 resumed>) = 0 [pid 296] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./15/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] <... restart_syscall resumed>) = 0 [pid 296] openat(AT_FDCWD, "./15/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./16/binderfs") = 0 [pid 297] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 296] <... openat resumed>) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./15/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [ 40.134616][ T794] F2FS-fs (loop2): switch discard_unit option is not allowed [ 40.142786][ T791] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.150199][ T795] F2FS-fs (loop0): invalid crc value [pid 296] rmdir("./15") = 0 [pid 296] mkdir("./16", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 814 ./strace-static-x86_64: Process 814 attached [pid 814] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 814] chdir("./16") = 0 [pid 814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 814] setpgid(0, 0) = 0 [pid 814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 814] write(3, "1000", 4) = 4 [pid 814] close(3) = 0 [pid 814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 814] write(1, "executing program\n", 18executing program ) = 18 [pid 814] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 814] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[815]}, 88) = 815 [pid 814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 815 attached [pid 815] set_robust_list(0x7f75466579a0, 24) = 0 [pid 815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 815] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 815] <... futex resumed>) = 1 [pid 815] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 815] <... futex resumed>) = 1 [pid 815] memfd_create("syzkaller", 0) = 5 [pid 815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [ 40.187527][ T789] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.195487][ T795] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 789] <... mount resumed>) = 0 [pid 789] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 789] chdir("./file4") = 0 [pid 789] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 789] ioctl(6, LOOP_CLR_FD) = 0 [pid 789] close(6) = 0 [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... open resumed>) = 6 [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] fspick(AT_FDCWD, ".", 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... fspick resumed>) = 7 [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 EINVAL (Invalid argument) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 789] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 0 [pid 788] <... futex resumed>) = 1 [pid 789] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... open resumed>) = 8 [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 789] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] <... futex resumed>) = 0 [pid 789] sendfile(6, 6, NULL, 281483568746501 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... sendto resumed>) = 36 [pid 788] <... futex resumed>) = 0 [pid 789] recvfrom(3, [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=788}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 788] <... futex resumed>) = 0 [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 789] <... futex resumed>) = 0 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] <... futex resumed>) = 0 [pid 789] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 789] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] <... futex resumed>) = 0 [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [ 40.240519][ T789] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.262363][ T789] F2FS-fs (loop3): switch discard_unit option is not allowed [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 789] <... futex resumed>) = 0 [pid 788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 789] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] <... futex resumed>) = 1 [pid 788] <... futex resumed>) = 0 [pid 789] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 788] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 789] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 789] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] exit_group(0) = ? [pid 789] +++ exited with 0 +++ [pid 788] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=788, si_uid=0, si_status=0, si_utime=5, si_stime=19} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 791] <... mount resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./16/binderfs") = 0 [pid 298] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 791] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 791] chdir("./file4") = 0 [pid 791] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 791] ioctl(6, LOOP_CLR_FD) = 0 [pid 791] close(6) = 0 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 40.290767][ T791] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 40.300215][ T791] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.309689][ T795] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.333745][ T795] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 791] <... futex resumed>) = 0 [pid 791] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... open resumed>) = 6 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 1 [pid 791] fspick(AT_FDCWD, ".", 0) = 7 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... futex resumed>) = 0 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 1 [pid 791] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 795] <... mount resumed>) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 795] chdir("./file4") = 0 [pid 795] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 795] ioctl(6, LOOP_CLR_FD) = 0 [pid 795] close(6) = 0 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... open resumed>) = 6 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] fspick(AT_FDCWD, ".", 0 [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 795] <... fspick resumed>) = 7 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 795] <... futex resumed>) = 0 [pid 795] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 791] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] <... futex resumed>) = 0 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... futex resumed>) = 0 [pid 791] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 795] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 790] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 1 [pid 791] <... futex resumed>) = 0 [pid 791] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 795] <... open resumed>) = 8 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 791] <... futex resumed>) = 1 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] <... futex resumed>) = 0 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 795] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 1 [pid 791] <... futex resumed>) = 0 [pid 791] sendfile(6, 6, NULL, 281483568746501 [pid 795] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] sendfile(6, 6, NULL, 281483568746501 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... futex resumed>) = 1 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 795] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 790] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 1 [pid 795] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 791] <... futex resumed>) = 0 [pid 795] <... sendto resumed>) = 36 [pid 795] recvfrom(3, [pid 791] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 795] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=793}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] <... sendto resumed>) = 36 [pid 795] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 791] recvfrom(3, [pid 795] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=790}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 795] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 795] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 795] <... futex resumed>) = 0 [pid 793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 795] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 795] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 795] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 793] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 0 [pid 795] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 793] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 795] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 795] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 791] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 795] <... futex resumed>) = 1 [pid 793] <... futex resumed>) = 0 [pid 795] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] exit_group(0 [pid 795] <... futex resumed>) = ? [pid 793] <... exit_group resumed>) = ? [pid 791] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 795] +++ exited with 0 +++ [pid 297] <... umount2 resumed>) = 0 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 793] +++ exited with 0 +++ [pid 790] <... futex resumed>) = 0 [pid 297] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 791] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 1 [pid 297] newfstatat(AT_FDCWD, "./16/file4", [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=793, si_uid=0, si_status=0, si_utime=5, si_stime=22} --- [pid 791] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 791] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 297] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "./16/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 295] <... openat resumed>) = 3 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... openat resumed>) = 4 [pid 295] newfstatat(3, "", [pid 791] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 0 [pid 297] newfstatat(4, "", [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, [pid 790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] getdents64(4, [pid 295] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 791] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 1 [pid 297] getdents64(4, [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 791] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 297] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] newfstatat(AT_FDCWD, "./15/binderfs", [pid 791] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 297] close(4 [pid 295] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... close resumed>) = 0 [pid 295] unlink("./15/binderfs" [pid 791] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 297] rmdir("./16/file4" [pid 295] <... unlink resumed>) = 0 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... rmdir resumed>) = 0 [pid 295] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] <... futex resumed>) = 0 [pid 297] getdents64(3, [pid 790] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./16") = 0 [pid 297] mkdir("./17", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 819 ./strace-static-x86_64: Process 819 attached [pid 819] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 819] chdir("./17") = 0 [ 40.345698][ T791] F2FS-fs (loop4): switch discard_unit option is not allowed [ 40.371554][ T795] F2FS-fs (loop0): switch discard_unit option is not allowed [pid 819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 819] setpgid(0, 0) = 0 [pid 819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 819] write(3, "1000", 4) = 4 [pid 819] close(3) = 0 [pid 819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 819] write(1, "executing program\n", 18executing program ) = 18 [pid 819] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 819] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 791] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 819] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[820]}, 88) = 820 [pid 819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 820 attached [pid 820] set_robust_list(0x7f75466579a0, 24) = 0 [pid 820] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 820] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 791] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 791] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 791] <... futex resumed>) = 1 [pid 791] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 790] exit_group(0 [pid 791] <... futex resumed>) = ? [pid 790] <... exit_group resumed>) = ? [pid 791] +++ exited with 0 +++ [pid 790] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=790, si_uid=0, si_status=0, si_utime=7, si_stime=17} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 820] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 820] <... futex resumed>) = 1 [pid 820] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./15/binderfs") = 0 [pid 299] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 820] <... futex resumed>) = 1 [pid 820] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] memfd_create("syzkaller", 0) = 5 [pid 820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./16/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./16/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./16/file4") = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./16") = 0 [pid 298] mkdir("./17", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 821 ./strace-static-x86_64: Process 821 attached [pid 821] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 821] chdir("./17") = 0 [pid 821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 821] setpgid(0, 0) = 0 [pid 821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 821] write(3, "1000", 4) = 4 [pid 821] close(3) = 0 [pid 821] symlink("/dev/binderfs", "./binderfs") = 0 [pid 821] write(1, "executing program\n", 18executing program ) = 18 [pid 821] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 821] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 821] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 821] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 821] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[822]}, 88) = 822 [pid 821] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 822 attached [pid 822] set_robust_list(0x7f75466579a0, 24) = 0 [pid 822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 822] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 822] <... futex resumed>) = 1 [pid 822] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 822] <... futex resumed>) = 1 [pid 822] memfd_create("syzkaller", 0) = 5 [pid 822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 820] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 815] <... write resumed>) = 20699119 [pid 815] munmap(0x7f753e237000, 138412032) = 0 [pid 815] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 815] ioctl(6, LOOP_SET_FD, 5 [pid 299] <... umount2 resumed>) = 0 [pid 815] <... ioctl resumed>) = 0 [pid 299] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 815] close(5 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 815] <... close resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./15/file4", [pid 815] close(6 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 815] <... close resumed>) = 0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./15/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 815] mkdir("./file4", 0777 [pid 299] <... openat resumed>) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 815] <... mkdir resumed>) = 0 [pid 299] getdents64(4, [pid 815] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 299] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./15/file4") = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./15") = 0 [pid 299] mkdir("./16", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 823 [pid 295] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 823 attached [pid 823] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 823] chdir("./16") = 0 [pid 823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 823] setpgid(0, 0) = 0 [pid 823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 823] write(3, "1000", 4) = 4 [pid 823] close(3) = 0 [pid 823] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 823] write(1, "executing program\n", 18) = 18 [pid 823] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 823] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 823] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 823] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 40.659972][ T815] loop1: detected capacity change from 0 to 40427 [ 40.678921][ T815] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [pid 823] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[824]}, 88) = 824 [pid 823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 824 attached [pid 824] set_robust_list(0x7f75466579a0, 24) = 0 [pid 824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 824] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 295] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 824] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 295] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 824] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 295] newfstatat(AT_FDCWD, "./15/file4", [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 824] <... futex resumed>) = 1 [pid 824] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 824] <... futex resumed>) = 1 [pid 824] memfd_create("syzkaller", 0) = 5 [pid 824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 295] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./15/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./15/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./15/file4") = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./15") = 0 [pid 295] mkdir("./16", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 825 [ 40.703405][ T815] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 40.716542][ T815] F2FS-fs (loop1): fault_injection options not supported [ 40.727230][ T815] F2FS-fs (loop1): fault_type options not supported executing program ./strace-static-x86_64: Process 825 attached [pid 825] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 825] chdir("./16") = 0 [pid 825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 825] setpgid(0, 0) = 0 [pid 825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 825] write(3, "1000", 4) = 4 [pid 825] close(3) = 0 [pid 825] symlink("/dev/binderfs", "./binderfs") = 0 [pid 825] write(1, "executing program\n", 18) = 18 [pid 825] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 825] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 825] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[826]}, 88) = 826 [pid 825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119./strace-static-x86_64: Process 826 attached [pid 826] set_robust_list(0x7f75466579a0, 24) = 0 [pid 826] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 826] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 826] <... futex resumed>) = 1 [pid 826] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] memfd_create("syzkaller", 0) = 5 [pid 826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 820] <... write resumed>) = 20699119 [ 40.756560][ T815] F2FS-fs (loop1): invalid crc value [pid 820] munmap(0x7f753e237000, 138412032) = 0 [pid 820] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 820] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 820] close(5) = 0 [ 40.790883][ T815] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.791774][ T820] loop2: detected capacity change from 0 to 40427 [pid 820] close(6) = 0 [pid 820] mkdir("./file4", 0777) = 0 [pid 820] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 822] <... write resumed>) = 20699119 [pid 822] munmap(0x7f753e237000, 138412032) = 0 [pid 822] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 815] <... mount resumed>) = 0 [pid 822] <... openat resumed>) = 6 [pid 822] ioctl(6, LOOP_SET_FD, 5 [pid 815] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 824] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 815] <... openat resumed>) = 5 [pid 822] <... ioctl resumed>) = 0 [pid 815] chdir("./file4" [pid 822] close(5 [pid 815] <... chdir resumed>) = 0 [pid 822] <... close resumed>) = 0 [pid 815] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 822] close(6 [pid 815] <... openat resumed>) = 6 [pid 815] ioctl(6, LOOP_CLR_FD) = 0 [pid 815] close(6) = 0 [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] fspick(AT_FDCWD, ".", 0 [pid 814] <... futex resumed>) = 0 [pid 815] <... fspick resumed>) = 7 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 814] <... futex resumed>) = 0 [ 40.876036][ T815] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 40.885144][ T815] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 40.895510][ T822] loop3: detected capacity change from 0 to 40427 [ 40.907049][ T815] F2FS-fs (loop1): switch discard_unit option is not allowed [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... close resumed>) = 0 [pid 815] <... futex resumed>) = 1 [pid 815] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] mkdir("./file4", 0777 [pid 814] <... futex resumed>) = 0 [pid 822] <... mkdir resumed>) = 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 822] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 815] <... futex resumed>) = 0 [pid 815] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 815] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... futex resumed>) = 0 [pid 815] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 814] <... futex resumed>) = 1 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 815] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 826] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... futex resumed>) = 0 [pid 814] <... futex resumed>) = 1 [pid 815] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] <... futex resumed>) = 0 [pid 815] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... sendto resumed>) = 36 [pid 814] <... futex resumed>) = 0 [pid 815] recvfrom(3, [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=814}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] <... futex resumed>) = 0 [pid 815] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 815] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] <... futex resumed>) = 0 [pid 815] <... futex resumed>) = 0 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 815] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... futex resumed>) = 0 [pid 814] <... futex resumed>) = 1 [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 815] <... futex resumed>) = 0 [pid 814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 814] <... futex resumed>) = 0 [pid 815] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 815] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 814] <... futex resumed>) = 0 [pid 815] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 814] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 814] <... futex resumed>) = 0 [pid 815] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 814] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 815] <... futex resumed>) = 0 [pid 814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 814] exit_group(0 [pid 815] <... futex resumed>) = ? [pid 814] <... exit_group resumed>) = ? [pid 815] +++ exited with 0 +++ [pid 814] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=814, si_uid=0, si_status=0, si_utime=5, si_stime=22} --- [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 296] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./16/binderfs") = 0 [ 40.924193][ T820] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 40.940383][ T820] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 40.985580][ T822] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 40.986231][ T820] F2FS-fs (loop2): fault_injection options not supported [ 40.997014][ T822] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 296] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 824] <... write resumed>) = 20699119 [pid 824] munmap(0x7f753e237000, 138412032) = 0 [pid 824] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 824] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 824] close(5) = 0 [ 41.030257][ T820] F2FS-fs (loop2): fault_type options not supported [ 41.030460][ T822] F2FS-fs (loop3): fault_injection options not supported [ 41.047421][ T822] F2FS-fs (loop3): fault_type options not supported [ 41.055901][ T820] F2FS-fs (loop2): invalid crc value [ 41.056993][ T822] F2FS-fs (loop3): invalid crc value [ 41.067205][ T824] loop4: detected capacity change from 0 to 40427 [pid 824] close(6) = 0 [pid 824] mkdir("./file4", 0777) = 0 [pid 824] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 826] <... write resumed>) = 20699119 [pid 826] munmap(0x7f753e237000, 138412032) = 0 [pid 826] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [ 41.076258][ T820] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.090247][ T822] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 826] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 826] close(5) = 0 [pid 826] close(6) = 0 [pid 826] mkdir("./file4", 0777) = 0 [ 41.121930][ T826] loop0: detected capacity change from 0 to 40427 [ 41.145825][ T824] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 41.156251][ T824] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 826] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 296] <... umount2 resumed>) = 0 executing program [pid 296] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./16/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./16/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./16/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./16") = 0 [pid 296] mkdir("./17", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 839 ./strace-static-x86_64: Process 839 attached [pid 839] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 839] chdir("./17") = 0 [pid 839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 839] setpgid(0, 0) = 0 [pid 839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 839] write(3, "1000", 4) = 4 [pid 839] close(3) = 0 [pid 839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 839] write(1, "executing program\n", 18) = 18 [pid 839] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 839] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 839] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 839] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[840]}, 88) = 840 [pid 839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... mount resumed>) = 0 [pid 820] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 820] chdir("./file4") = 0 [pid 820] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 820] ioctl(6, LOOP_CLR_FD) = 0 [pid 820] close(6) = 0 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] fspick(AT_FDCWD, ".", 0) = 7 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] <... futex resumed>) = 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 820] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0./strace-static-x86_64: Process 840 attached [ 41.168556][ T824] F2FS-fs (loop4): fault_injection options not supported [ 41.174707][ T820] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 41.176033][ T824] F2FS-fs (loop4): fault_type options not supported [ 41.186474][ T820] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.188859][ T822] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.202405][ T820] F2FS-fs (loop2): switch discard_unit option is not allowed [ 41.204164][ T822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 840] set_robust_list(0x7f75466579a0, 24) = 0 [pid 822] <... mount resumed>) = 0 [pid 820] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 840] rt_sigprocmask(SIG_SETMASK, [], [pid 822] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 822] <... openat resumed>) = 5 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 822] chdir("./file4" [pid 840] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 822] <... chdir resumed>) = 0 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 840] <... futex resumed>) = 1 [pid 839] <... futex resumed>) = 0 [pid 822] <... openat resumed>) = 6 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] bpf(BPF_MAP_CREATE, NULL, 0 [pid 822] ioctl(6, LOOP_CLR_FD [pid 840] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 822] <... ioctl resumed>) = 0 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] close(6 [pid 840] <... futex resumed>) = 1 [pid 839] <... futex resumed>) = 0 [pid 822] <... close resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 839] <... futex resumed>) = 0 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 822] <... futex resumed>) = 1 [pid 821] <... futex resumed>) = 0 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] <... futex resumed>) = 1 [pid 839] <... futex resumed>) = 0 [pid 822] <... open resumed>) = 6 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 839] <... futex resumed>) = 0 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 840] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] <... futex resumed>) = 0 [pid 821] <... futex resumed>) = 0 [pid 840] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 839] <... futex resumed>) = 0 [pid 822] fspick(AT_FDCWD, ".", 0 [pid 840] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... fspick resumed>) = 7 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 1 [pid 821] <... futex resumed>) = 0 [pid 840] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 839] <... futex resumed>) = 0 [pid 822] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 820] <... futex resumed>) = 1 [pid 840] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] <... futex resumed>) = 0 [pid 819] <... futex resumed>) = 0 [pid 840] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 820] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 822] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = 0 [pid 839] <... futex resumed>) = 1 [pid 840] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... socket resumed>) = 3 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 840] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... bpf resumed>) = 4 [pid 839] <... futex resumed>) = 0 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... futex resumed>) = 0 [pid 839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 840] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 839] <... futex resumed>) = 0 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 820] <... futex resumed>) = 0 [pid 819] <... futex resumed>) = 1 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] <... futex resumed>) = 1 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... futex resumed>) = 0 [pid 839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] <... futex resumed>) = 0 [pid 820] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [ 41.217920][ T826] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 41.221670][ T824] F2FS-fs (loop4): invalid crc value [ 41.230964][ T826] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 41.247219][ T826] F2FS-fs (loop0): fault_injection options not supported [ 41.248562][ T822] F2FS-fs (loop3): switch discard_unit option is not allowed [ 41.254406][ T826] F2FS-fs (loop0): fault_type options not supported [pid 840] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 820] <... open resumed>) = 8 [pid 840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] <... futex resumed>) = 0 [pid 822] <... open resumed>) = 8 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = 1 [pid 840] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 822] <... futex resumed>) = 1 [pid 820] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 821] <... futex resumed>) = 0 [pid 819] <... futex resumed>) = 0 [pid 840] <... futex resumed>) = 1 [pid 839] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 819] <... futex resumed>) = 1 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 820] <... futex resumed>) = 0 [pid 840] <... sendmsg resumed>) = 20 [pid 839] <... futex resumed>) = 0 [pid 822] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 820] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 822] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 840] <... futex resumed>) = 1 [pid 839] <... futex resumed>) = 0 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] memfd_create("syzkaller", 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 1 [pid 821] <... futex resumed>) = 0 [pid 820] <... futex resumed>) = 1 [pid 819] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 0 [pid 819] <... futex resumed>) = 0 [pid 840] <... memfd_create resumed>) = 5 [pid 839] <... futex resumed>) = 0 [pid 822] sendfile(6, 6, NULL, 281483568746501 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] sendfile(6, 6, NULL, 281483568746501 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 822] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 820] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 840] <... mmap resumed>) = 0x7f753e237000 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = 1 [pid 822] <... futex resumed>) = 1 [pid 820] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 822] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 821] <... futex resumed>) = 0 [pid 819] <... futex resumed>) = 0 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 0 [pid 821] <... futex resumed>) = 1 [pid 820] <... futex resumed>) = 0 [pid 819] <... futex resumed>) = 1 [pid 822] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 820] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 822] <... sendto resumed>) = 36 [pid 822] recvfrom(3, [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 820] <... sendto resumed>) = 36 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=821}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 820] recvfrom(3, [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 820] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=819}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 822] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 821] <... futex resumed>) = 0 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 820] <... futex resumed>) = 1 [pid 819] <... futex resumed>) = 0 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 1 [pid 821] <... futex resumed>) = 0 [pid 820] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 819] <... futex resumed>) = 0 [pid 822] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 821] <... futex resumed>) = 0 [pid 820] <... futex resumed>) = 0 [pid 819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 822] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 820] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 819] <... futex resumed>) = 0 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 822] <... futex resumed>) = 1 [pid 821] <... futex resumed>) = 0 [pid 820] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... futex resumed>) = 0 [pid 821] <... futex resumed>) = 0 [pid 822] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 820] <... futex resumed>) = 1 [pid 819] <... futex resumed>) = 0 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 820] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 819] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = 0 [pid 821] <... futex resumed>) = 1 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 822] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = 1 [pid 819] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = 1 [pid 821] <... futex resumed>) = 0 [pid 820] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 821] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 819] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 821] <... futex resumed>) = 0 [pid 820] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 822] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 821] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 820] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 822] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = 1 [pid 819] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = 1 [pid 821] <... futex resumed>) = 0 [pid 820] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 819] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 822] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 821] exit_group(0 [pid 820] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 819] <... futex resumed>) = 0 [pid 822] <... futex resumed>) = ? [pid 821] <... exit_group resumed>) = ? [pid 820] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 819] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 822] +++ exited with 0 +++ [pid 821] +++ exited with 0 +++ [pid 820] <... futex resumed>) = 0 [pid 819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 820] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 819] exit_group(0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=821, si_uid=0, si_status=0, si_utime=8, si_stime=20} --- [pid 820] <... futex resumed>) = ? [pid 819] <... exit_group resumed>) = ? [pid 820] +++ exited with 0 +++ [pid 819] +++ exited with 0 +++ [pid 298] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=819, si_uid=0, si_status=0, si_utime=3, si_stime=20} --- [pid 298] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 298] <... openat resumed>) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 298] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./17/binderfs") = 0 [pid 298] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... restart_syscall resumed>) = 0 [pid 297] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 41.272883][ T826] F2FS-fs (loop0): invalid crc value [ 41.280974][ T824] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.281477][ T826] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 297] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 297] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] unlink("./17/binderfs") = 0 [pid 297] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 824] <... mount resumed>) = 0 [pid 824] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 824] chdir("./file4") = 0 [pid 824] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 824] ioctl(6, LOOP_CLR_FD) = 0 [pid 824] close(6) = 0 [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 824] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... open resumed>) = 6 [ 41.371271][ T824] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.378130][ T824] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 823] <... futex resumed>) = 0 [pid 824] fspick(AT_FDCWD, ".", 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... fspick resumed>) = 7 [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 823] <... futex resumed>) = 0 [pid 824] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = 0 [pid 823] <... futex resumed>) = 1 [pid 824] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... open resumed>) = 8 [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... futex resumed>) = 0 [pid 824] sendfile(6, 6, NULL, 281483568746501 [pid 826] <... mount resumed>) = 0 [pid 826] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 824] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 823] <... futex resumed>) = 0 [pid 824] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=823}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = 0 [pid 823] <... futex resumed>) = 1 [pid 824] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 824] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 824] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 824] <... futex resumed>) = 0 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = 0 [pid 823] <... futex resumed>) = 1 [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 824] <... futex resumed>) = 0 [pid 823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 823] <... futex resumed>) = 0 [pid 824] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 824] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 823] <... futex resumed>) = 0 [pid 824] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 823] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 823] <... futex resumed>) = 0 [pid 824] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 823] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 824] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 824] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 823] <... futex resumed>) = 0 [pid 823] exit_group(0) = ? [pid 824] <... futex resumed>) = ? [pid 826] <... openat resumed>) = 5 [pid 826] chdir("./file4") = 0 [pid 826] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 826] ioctl(6, LOOP_CLR_FD [pid 824] +++ exited with 0 +++ [pid 823] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=823, si_uid=0, si_status=0, si_utime=5, si_stime=14} --- [pid 299] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./16/binderfs" [pid 826] <... ioctl resumed>) = 0 [pid 299] <... unlink resumed>) = 0 [pid 299] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 826] close(6) = 0 [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] fspick(AT_FDCWD, ".", 0) = 7 [ 41.412308][ T826] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 41.419593][ T826] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 41.422508][ T824] F2FS-fs (loop4): switch discard_unit option is not allowed [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 EINVAL (Invalid argument) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 826] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=825}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 826] <... futex resumed>) = 1 [pid 826] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 826] <... futex resumed>) = 1 [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 826] <... futex resumed>) = 1 [pid 826] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 826] <... futex resumed>) = 1 [pid 826] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 826] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... futex resumed>) = 0 [pid 825] exit_group(0) = ? [pid 826] <... futex resumed>) = ? [pid 826] +++ exited with 0 +++ [pid 825] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=825, si_uid=0, si_status=0, si_utime=8, si_stime=18} --- [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 840] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 295] <... restart_syscall resumed>) = 0 [pid 295] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 295] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 295] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] unlink("./16/binderfs") = 0 [ 41.457098][ T826] F2FS-fs (loop0): switch discard_unit option is not allowed [pid 295] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 297] <... umount2 resumed>) = 0 [pid 297] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] newfstatat(AT_FDCWD, "./17/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 297] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 297] openat(AT_FDCWD, "./17/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 297] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 297] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 297] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 297] close(4) = 0 [pid 297] rmdir("./17/file4") = 0 [pid 297] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 297] close(3) = 0 [pid 297] rmdir("./17") = 0 [pid 297] mkdir("./18", 0777) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 850 ./strace-static-x86_64: Process 850 attached [pid 850] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 850] chdir("./18") = 0 [pid 850] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 850] setpgid(0, 0) = 0 [pid 850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 850] write(3, "1000", 4) = 4 [pid 850] close(3) = 0 [pid 850] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 850] write(1, "executing program\n", 18) = 18 [pid 850] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 850] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 850] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 850] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 850] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 850] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[851]}, 88) = 851 [pid 850] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 851 attached [pid 298] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 851] set_robust_list(0x7f75466579a0, 24 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 851] <... set_robust_list resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./17/file4", [pid 851] rt_sigprocmask(SIG_SETMASK, [], [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 298] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 851] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 851] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 298] openat(AT_FDCWD, "./17/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 850] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 4 [pid 851] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 850] <... futex resumed>) = 0 [pid 298] newfstatat(4, "", [pid 851] bpf(BPF_MAP_CREATE, NULL, 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 851] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 298] getdents64(4, [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 850] <... futex resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 851] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 850] <... futex resumed>) = 0 [pid 298] getdents64(4, [pid 851] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... getdents64 resumed>0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 851] <... bpf resumed>) = -1 ENOENT (No such file or directory) [pid 298] close(4 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 850] <... futex resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 851] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] rmdir("./17/file4" [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 850] <... futex resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 851] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] getdents64(3, [pid 851] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... getdents64 resumed>0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] close(3 [pid 851] <... futex resumed>) = 1 [pid 850] <... futex resumed>) = 0 [pid 851] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... close resumed>) = 0 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 850] <... futex resumed>) = 0 [pid 298] rmdir("./17" [pid 851] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 298] <... rmdir resumed>) = 0 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] mkdir("./18", 0777 [pid 851] <... futex resumed>) = 1 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... mkdir resumed>) = 0 [pid 851] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148 [pid 850] <... futex resumed>) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 851] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 3 [pid 850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 851] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] ioctl(3, LOOP_CLR_FD [pid 851] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 850] <... futex resumed>) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 851] <... socket resumed>) = 3 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] close(3 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 851] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... close resumed>) = 0 [pid 851] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 851] <... bpf resumed>) = 4 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 850] <... futex resumed>) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55558ce1a690) = 852 [pid 851] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 850] <... futex resumed>) = 0 [pid 851] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 850] <... futex resumed>) = 0 [pid 851] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 850] <... futex resumed>) = 0 [pid 851] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 851] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 850] <... futex resumed>) = 0 [pid 851] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 851] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH [pid 850] <... futex resumed>) = 0 [pid 851] <... sendmsg resumed>) = 20 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 851] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] memfd_create("syzkaller", 0 [pid 850] <... futex resumed>) = 0 [pid 851] <... memfd_create resumed>) = 5 [pid 851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 851] <... mmap resumed>) = 0x7f753e237000 [pid 295] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 852 attached [pid 852] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 852] chdir("./18") = 0 [pid 852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 852] setpgid(0, 0) = 0 [pid 852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 852] write(3, "1000", 4) = 4 [pid 852] close(3) = 0 [pid 852] symlink("/dev/binderfs", "./binderfs") = 0 [pid 852] write(1, "executing program\n", 18executing program ) = 18 [pid 852] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 852] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 852] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 852] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[853]}, 88) = 853 [pid 852] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] newfstatat(AT_FDCWD, "./16/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 295] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 295] openat(AT_FDCWD, "./16/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 295] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 295] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 295] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 295] close(4) = 0 [pid 295] rmdir("./16/file4") = 0 [pid 295] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 295] close(3) = 0 [pid 295] rmdir("./16") = 0 [pid 295] mkdir("./17", 0777) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 854 ./strace-static-x86_64: Process 853 attached [pid 853] set_robust_list(0x7f75466579a0, 24) = 0 [pid 853] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 853] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 853] <... futex resumed>) = 1 [pid 853] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] memfd_create("syzkaller", 0) = 5 [pid 853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 ./strace-static-x86_64: Process 854 attached [pid 854] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 854] chdir("./17") = 0 [pid 854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 854] setpgid(0, 0) = 0 [pid 854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 854] write(3, "1000", 4) = 4 [pid 854] close(3) = 0 [pid 854] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 854] write(1, "executing program\n", 18) = 18 [pid 854] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 854] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 854] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[855]}, 88) = 855 [pid 854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 855 attached [pid 855] set_robust_list(0x7f75466579a0, 24) = 0 [pid 855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 855] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 855] <... futex resumed>) = 1 [pid 855] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 840] <... write resumed>) = 20699119 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 855] <... futex resumed>) = 1 [pid 855] memfd_create("syzkaller", 0) = 5 [pid 855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [pid 840] munmap(0x7f753e237000, 138412032) = 0 [pid 840] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 840] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 840] close(5) = 0 [pid 840] close(6) = 0 [pid 840] mkdir("./file4", 0777) = 0 [ 41.698149][ T840] loop1: detected capacity change from 0 to 40427 [ 41.717092][ T840] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 41.734461][ T840] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 840] mount("/dev/loop1", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./16/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./16/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./16/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./16/file4") = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./16") = 0 [pid 299] mkdir("./17", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 856 [ 41.750120][ T840] F2FS-fs (loop1): fault_injection options not supported [ 41.777463][ T840] F2FS-fs (loop1): fault_type options not supported ./strace-static-x86_64: Process 856 attached [pid 856] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 856] chdir("./17") = 0 [pid 856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 856] setpgid(0, 0) = 0 [pid 856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 856] write(3, "1000", 4executing program ) = 4 [pid 856] close(3) = 0 [pid 856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 856] write(1, "executing program\n", 18) = 18 [pid 856] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 856] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 856] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 856] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[858]}, 88) = 858 [pid 856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 858 attached [pid 858] set_robust_list(0x7f75466579a0, 24) = 0 [pid 858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 858] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 851] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 858] <... futex resumed>) = 1 [pid 858] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 858] <... futex resumed>) = 1 [pid 858] memfd_create("syzkaller", 0) = 5 [pid 858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [ 41.800762][ T840] F2FS-fs (loop1): invalid crc value [ 41.836089][ T840] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 853] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 855] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 840] <... mount resumed>) = 0 [pid 840] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 840] chdir("./file4") = 0 [pid 840] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 6 [pid 840] ioctl(6, LOOP_CLR_FD) = 0 [pid 840] close(6) = 0 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... open resumed>) = 6 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] fspick(AT_FDCWD, ".", 0 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... fspick resumed>) = 7 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 41.932599][ T840] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 41.949738][ T840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 840] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 851] <... write resumed>) = 20699119 [pid 851] munmap(0x7f753e237000, 138412032 [pid 840] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 840] <... open resumed>) = 8 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 839] <... futex resumed>) = 0 [pid 840] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] sendfile(6, 6, NULL, 281483568746501 [pid 851] <... munmap resumed>) = 0 [pid 851] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 6 [pid 839] <... futex resumed>) = 0 [pid 851] ioctl(6, LOOP_SET_FD, 5 [pid 840] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 840] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 839] <... futex resumed>) = 0 [pid 840] <... sendto resumed>) = 36 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=839}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 840] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] <... futex resumed>) = 0 [pid 840] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 840] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 839] <... futex resumed>) = 0 [pid 840] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 840] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 839] <... futex resumed>) = 0 [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 840] <... futex resumed>) = 0 [pid 839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 840] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] <... futex resumed>) = 0 [pid 840] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 840] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 840] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 839] <... futex resumed>) = 0 [pid 840] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 839] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 840] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 840] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 839] <... futex resumed>) = 0 [pid 840] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 839] exit_group(0) = ? [pid 840] <... futex resumed>) = ? [pid 840] +++ exited with 0 +++ [pid 839] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=839, si_uid=0, si_status=0, si_utime=3, si_stime=23} --- [pid 296] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 296] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 296] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 296] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] unlink("./17/binderfs") = 0 [pid 296] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 858] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 855] <... write resumed>) = 20699119 [pid 851] <... ioctl resumed>) = 0 [pid 855] munmap(0x7f753e237000, 138412032 [pid 851] close(5 [pid 855] <... munmap resumed>) = 0 [pid 851] <... close resumed>) = 0 [pid 851] close(6 [pid 855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [ 41.980568][ T840] F2FS-fs (loop1): switch discard_unit option is not allowed [ 42.003966][ T851] loop2: detected capacity change from 0 to 40427 [pid 855] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 855] close(5) = 0 [pid 855] close(6 [pid 853] <... write resumed>) = 20699119 [pid 853] munmap(0x7f753e237000, 138412032) = 0 [pid 853] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 853] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 853] close(5) = 0 [pid 853] close(6 [pid 851] <... close resumed>) = 0 [pid 851] mkdir("./file4", 0777) = 0 [pid 851] mount("/dev/loop2", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 855] <... close resumed>) = 0 [pid 853] <... close resumed>) = 0 [pid 855] mkdir("./file4", 0777 [pid 853] mkdir("./file4", 0777 [pid 855] <... mkdir resumed>) = 0 [pid 853] <... mkdir resumed>) = 0 [pid 853] mount("/dev/loop3", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [ 42.051835][ T855] loop0: detected capacity change from 0 to 40427 [ 42.070901][ T853] loop3: detected capacity change from 0 to 40427 [ 42.101559][ T853] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 42.108331][ T853] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 42.116630][ T855] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 42.130199][ T853] F2FS-fs (loop3): fault_injection options not supported [ 42.139245][ T853] F2FS-fs (loop3): fault_type options not supported [ 42.139537][ T851] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [pid 855] mount("/dev/loop0", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 296] <... umount2 resumed>) = 0 [pid 858] <... write resumed>) = 20699119 [ 42.152949][ T855] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.160650][ T853] F2FS-fs (loop3): invalid crc value [ 42.166947][ T851] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.176480][ T855] F2FS-fs (loop0): fault_injection options not supported [ 42.191535][ T855] F2FS-fs (loop0): fault_type options not supported [pid 296] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 858] munmap(0x7f753e237000, 138412032) = 0 [pid 858] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 858] ioctl(6, LOOP_SET_FD, 5 [pid 296] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 858] <... ioctl resumed>) = 0 [pid 858] close(5) = 0 [pid 858] close(6 [pid 296] newfstatat(AT_FDCWD, "./17/file4", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 296] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 296] openat(AT_FDCWD, "./17/file4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 296] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 296] getdents64(4, 0x55558ce23770 /* 2 entries */, 32768) = 48 [pid 296] getdents64(4, 0x55558ce23770 /* 0 entries */, 32768) = 0 [pid 296] close(4) = 0 [pid 296] rmdir("./17/file4") = 0 [pid 296] getdents64(3, 0x55558ce1b730 /* 0 entries */, 32768) = 0 [pid 296] close(3) = 0 [pid 296] rmdir("./17"executing program ) = 0 [pid 296] mkdir("./18", 0777) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558ce1a690) = 868 ./strace-static-x86_64: Process 868 attached [pid 868] set_robust_list(0x55558ce1a6a0, 24) = 0 [pid 868] chdir("./18") = 0 [pid 868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 868] setpgid(0, 0) = 0 [pid 868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 868] write(3, "1000", 4) = 4 [pid 868] close(3) = 0 [pid 868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 868] write(1, "executing program\n", 18) = 18 [pid 868] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] rt_sigaction(SIGRT_1, {sa_handler=0x7f75466c3a30, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f75466b4be0}, NULL, 8) = 0 [pid 868] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546637000 [pid 868] mprotect(0x7f7546638000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 868] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 868] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546657990, parent_tid=0x7f7546657990, exit_signal=0, stack=0x7f7546637000, stack_size=0x20300, tls=0x7f75466576c0} => {parent_tid=[869]}, 88) = 869 [pid 868] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 869 attached [pid 869] set_robust_list(0x7f75466579a0, 24) = 0 [pid 869] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 869] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] bpf(BPF_MAP_CREATE, NULL, 0) = -1 EINVAL (Invalid argument) [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] bpf(BPF_BTF_GET_NEXT_ID, {start_id=0, next_id=0}, 8) = -1 ENOENT (No such file or directory) [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_EXT, insn_cnt=12, insns=NULL, license="syzkaller", log_level=11, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_DEVICE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EINVAL (Invalid argument) [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000140, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(4, 16, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=4294966911, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=NULL, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 148) = -1 EFAULT (Bad address) [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 869] <... futex resumed>) = 1 [pid 869] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sys_enter", prog_fd=-1}}, 16 [pid 858] <... close resumed>) = 0 [pid 858] mkdir("./file4", 0777) = 0 [pid 858] mount("/dev/loop4", "./file4", "f2fs", 0, "noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=000000000000000"... [pid 869] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\xa7\x91\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL|MSG_BATCH) = 20 [pid 869] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 868] <... futex resumed>) = 0 [pid 868] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 42.197607][ T851] F2FS-fs (loop2): fault_injection options not supported [ 42.199163][ T855] F2FS-fs (loop0): invalid crc value [ 42.208806][ T858] loop4: detected capacity change from 0 to 40427 [ 42.211007][ T851] F2FS-fs (loop2): fault_type options not supported [ 42.224948][ T855] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.231216][ T853] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.241466][ T858] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [pid 868] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 869] <... futex resumed>) = 1 [pid 869] memfd_create("syzkaller", 0) = 5 [pid 869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753e237000 [ 42.250079][ T858] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 42.257638][ T851] F2FS-fs (loop2): invalid crc value [ 42.258300][ T858] F2FS-fs (loop4): fault_injection options not supported [ 42.271166][ T858] F2FS-fs (loop4): fault_type options not supported [ 42.289345][ T858] F2FS-fs (loop4): invalid crc value [ 42.294674][ T851] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.331009][ T858] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.358875][ T853] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 42.365761][ T855] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [pid 869] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 853] <... mount resumed>) = 0 [pid 855] <... mount resumed>) = 0 [pid 853] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 853] chdir("./file4" [pid 855] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 853] <... chdir resumed>) = 0 [pid 855] <... openat resumed>) = 5 [pid 853] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 6 [pid 855] chdir("./file4") = 0 [pid 855] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 853] ioctl(6, LOOP_CLR_FD [pid 855] <... openat resumed>) = 6 [pid 853] <... ioctl resumed>) = 0 [pid 853] close(6 [pid 855] ioctl(6, LOOP_CLR_FD) = 0 [pid 853] <... close resumed>) = 0 [pid 855] close(6 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... close resumed>) = 0 [pid 853] <... futex resumed>) = 1 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 853] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... open resumed>) = 6 [pid 855] <... futex resumed>) = 1 [pid 855] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 1 [pid 853] fspick(AT_FDCWD, ".", 0 [pid 855] fspick(AT_FDCWD, ".", 0) = 7 [pid 853] <... fspick resumed>) = 7 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 854] <... futex resumed>) = 0 [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 1 [pid 853] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 42.378224][ T855] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.386261][ T853] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.415601][ T851] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 855] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 858] <... mount resumed>) = 0 [pid 858] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY) = 5 [pid 858] chdir("./file4") = 0 [pid 858] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 6 [pid 858] ioctl(6, LOOP_CLR_FD) = 0 [pid 858] close(6) = 0 [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 856] <... futex resumed>) = 0 [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 858] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... open resumed>) = 6 [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = 0 [pid 856] <... futex resumed>) = 1 [pid 858] fspick(AT_FDCWD, ".", 0) = 7 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 858] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 853] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 854] futex(0x7f754672a75c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7546616000 [pid 854] mprotect(0x7f7546617000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f7546636990, parent_tid=0x7f7546636990, exit_signal=0, stack=0x7f7546616000, stack_size=0x20300, tls=0x7f75466366c0} => {parent_tid=[881]}, 88) = 881 [pid 854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 854] futex(0x7f754672a758, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 854] futex(0x7f754672a75c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [ 42.428973][ T853] F2FS-fs (loop3): switch discard_unit option is not allowed [ 42.433698][ T858] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 42.436467][ T855] F2FS-fs (loop0): switch discard_unit option is not allowed [ 42.443224][ T858] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.451190][ T851] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 853] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=852}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 853] <... futex resumed>) = 1 [pid 853] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 853] <... futex resumed>) = 1 [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 853] <... futex resumed>) = 1 [pid 853] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 852] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 853] <... futex resumed>) = 1 [pid 852] <... futex resumed>) = 0 [pid 853] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 852] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 853] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 853] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 852] <... futex resumed>) = 0 [pid 853] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 852] exit_group(0 [pid 858] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 853] <... futex resumed>) = ? [pid 852] <... exit_group resumed>) = ? [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 856] <... futex resumed>) = 0 [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 881 attached [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 881] set_robust_list(0x7f75466369a0, 24 [pid 858] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 853] +++ exited with 0 +++ [pid 852] +++ exited with 0 +++ [pid 881] <... set_robust_list resumed>) = 0 [pid 858] <... open resumed>) = 8 [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] rt_sigprocmask(SIG_SETMASK, [], [pid 858] <... futex resumed>) = 1 [pid 856] <... futex resumed>) = 0 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=852, si_uid=0, si_status=0, si_utime=4, si_stime=22} --- [pid 881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 881] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 881] <... open resumed>) = 8 [pid 858] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 881] futex(0x7f754672a75c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [ 42.477108][ T858] F2FS-fs (loop4): switch discard_unit option is not allowed [ 42.494150][ T881] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 42.505725][ T881] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 42.513948][ T881] CPU: 1 PID: 881 Comm: syz-executor389 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [pid 881] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC [pid 858] <... pwritev2 resumed>) = -1 EIO (Input/output error) [pid 854] futex(0x7f754672a758, FUTEX_WAKE_PRIVATE, 1000000 [pid 869] <... write resumed>) = 20699119 [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 854] <... futex resumed>) = 0 [pid 851] <... mount resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 869] munmap(0x7f753e237000, 138412032 [pid 858] <... futex resumed>) = 1 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] openat(AT_FDCWD, "./file4", O_RDONLY|O_DIRECTORY [pid 869] <... munmap resumed>) = 0 [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] <... futex resumed>) = 0 [pid 851] <... openat resumed>) = 5 [pid 869] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 855] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 851] chdir("./file4" [pid 298] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 869] <... openat resumed>) = 6 [pid 851] <... chdir resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 869] ioctl(6, LOOP_SET_FD, 5 [pid 851] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 298] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 851] <... openat resumed>) = 6 [pid 298] <... openat resumed>) = 3 [pid 851] ioctl(6, LOOP_CLR_FD [pid 298] newfstatat(3, "", [pid 851] <... ioctl resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 851] close(6 [pid 298] getdents64(3, [pid 851] <... close resumed>) = 0 [pid 298] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 851] <... futex resumed>) = 1 [pid 850] <... futex resumed>) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 851] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] newfstatat(AT_FDCWD, "./18/binderfs", [pid 851] <... open resumed>) = 6 [pid 850] <... futex resumed>) = 0 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] unlink("./18/binderfs" [pid 851] <... futex resumed>) = 0 [pid 850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... unlink resumed>) = 0 [pid 851] fspick(AT_FDCWD, ".", 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] umount2("./18/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 851] <... fspick resumed>) = 7 [pid 850] <... futex resumed>) = 0 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] <... futex resumed>) = 0 [pid 850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 851] fsconfig(7, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... ioctl resumed>) = 0 [pid 869] close(5) = 0 [pid 869] close(6 [pid 851] <... fsconfig resumed>) = -1 EINVAL (Invalid argument) [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] <... futex resumed>) = 1 [pid 851] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] <... futex resumed>) = 1 [pid 851] pwritev2(8, [{iov_base="\x00", iov_len=1}], 1, 8192, RWF_HIPRI|RWF_DSYNC) = -1 EIO (Input/output error) [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] <... futex resumed>) = 1 [pid 851] sendfile(6, 6, NULL, 281483568746501) = -1 EIO (Input/output error) [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] <... futex resumed>) = 1 [pid 851] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 [pid 851] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=850}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 851] <... futex resumed>) = 1 [pid 851] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 851] <... futex resumed>) = 1 [pid 851] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 851] <... futex resumed>) = 1 [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 851] <... futex resumed>) = 1 [pid 851] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 850] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 851] <... futex resumed>) = 1 [pid 851] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 851] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 850] <... futex resumed>) = 0 [pid 850] exit_group(0) = ? [pid 851] <... futex resumed>) = ? [pid 851] +++ exited with 0 +++ [pid 850] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=850, si_uid=0, si_status=0, si_utime=7, si_stime=20} --- [pid 297] restart_syscall(<... resuming interrupted clone ...> [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = 0 [pid 856] <... futex resumed>) = 1 [pid 858] sendfile(6, 6, NULL, 281483568746501 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... sendfile resumed>) = -1 EIO (Input/output error) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 856] <... futex resumed>) = 0 [pid 858] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... sendto resumed>) = 36 [pid 856] <... futex resumed>) = 0 [pid 858] recvfrom(3, [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 858] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=856}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... restart_syscall resumed>) = 0 [pid 858] <... futex resumed>) = 1 [pid 856] <... futex resumed>) = 0 [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 297] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 858] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 858] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 297] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... openat resumed>) = 3 [pid 858] <... futex resumed>) = 1 [pid 856] <... futex resumed>) = 0 [pid 297] newfstatat(3, "", [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 297] getdents64(3, [pid 858] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 297] <... getdents64 resumed>0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 858] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 297] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 858] <... futex resumed>) = 1 [pid 856] <... futex resumed>) = 0 [pid 297] newfstatat(AT_FDCWD, "./18/binderfs", [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 297] unlink("./18/binderfs" [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 297] <... unlink resumed>) = 0 [pid 858] <... futex resumed>) = 0 [pid 856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 297] umount2("./18/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 858] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 858] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 856] <... futex resumed>) = 0 [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 858] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 856] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 858] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 858] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 856] <... futex resumed>) = 0 [pid 858] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] exit_group(0 [pid 858] <... futex resumed>) = ? [pid 856] <... exit_group resumed>) = ? [pid 858] +++ exited with 0 +++ [pid 856] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=856, si_uid=0, si_status=0, si_utime=1, si_stime=19} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [ 42.524009][ T881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.526856][ T869] loop1: detected capacity change from 0 to 40427 [ 42.533897][ T881] RIP: 0010:update_sit_entry+0x5f3/0x1070 [ 42.533944][ T881] Code: c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 45 e4 86 ff 4c 8b 33 4c 03 75 a8 4d 89 f4 49 c1 ec 03 49 bd 00 00 00 00 00 fc ff df <43> 0f b6 04 2c 84 c0 0f 85 0d 09 00 00 41 0f b6 1e 41 89 df 8b 45 [ 42.544049][ T851] F2FS-fs (loop2): switch discard_unit option is not allowed [ 42.545704][ T881] RSP: 0018:ffffc9000283ec68 EFLAGS: 00010246 [pid 854] futex(0x7f754672a75c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x55558ce1b730 /* 4 entries */, 32768) = 112 [pid 299] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./17/binderfs") = 0 [pid 299] umount2("./17/file4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 854] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = 0 [pid 854] <... futex resumed>) = 1 [ 42.578362][ T881] RAX: 1ffff1102205f23a RBX: ffff8881102f91d0 RCX: 0000000000000037 [ 42.586169][ T881] RDX: ffff888119f82780 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.593980][ T881] RBP: ffffc9000283ecf0 R08: ffffffff822bd7dd R09: ffffffff822bd33c [ 42.601793][ T881] R10: 0000000000000003 R11: ffff888119f82780 R12: 0000000000000000 [ 42.609601][ T881] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff110237980b0 [ 42.617412][ T881] FS: 00007f75466366c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [pid 855] sendfile(6, 6, NULL, 281483568746501 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... sendfile resumed>) = 0 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 855] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 855] sendto(3, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... sendto resumed>) = 36 [pid 855] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=854}, {error=0, msg={nlmsg_len=20, nlmsg_type=0x91a7 /* NLMSG_??? */, nlmsg_flags=NLM_F_MULTI|NLM_F_ACK|NLM_F_ECHO|NLM_F_DUMP_FILTERED|0x40, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 855] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 855] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 855] <... sendmsg resumed>) = -1 EFAULT (Bad address) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 855] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 855] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=-1}}, 16 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 855] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 855] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000 [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 855] <... futex resumed>) = 0 [pid 854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 855] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 855] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [pid 855] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] futex(0x7f754672a748, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 854] <... futex resumed>) = 0 [pid 855] ioctl(-1, USB_RAW_IOCTL_EVENT_FETCH [pid 854] futex(0x7f754672a74c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 855] <... ioctl resumed>, 0x7f75466561f0) = -1 EBADF (Bad file descriptor) [pid 855] futex(0x7f754672a74c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 854] <... futex resumed>) = 0 [ 42.626180][ T881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.632607][ T881] CR2: 00007f75466f0528 CR3: 0000000118e55000 CR4: 00000000003506a0 [ 42.640428][ T881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.648226][ T881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.656037][ T881] Call Trace: [ 42.659160][ T881] [ 42.661938][ T881] ? __die_body+0x62/0xb0 [ 42.666103][ T881] ? die_addr+0x9f/0xd0 [ 42.670096][ T881] ? exc_general_protection+0x311/0x4b0 [ 42.675479][ T881] ? asm_exc_general_protection+0x27/0x30 [ 42.681038][ T881] ? update_sit_entry+0x2c/0x1070 [ 42.685901][ T881] ? update_sit_entry+0x4cd/0x1070 [ 42.690840][ T881] ? update_sit_entry+0x5f3/0x1070 [ 42.695787][ T881] ? update_sit_entry+0x4cd/0x1070 [ 42.700737][ T881] f2fs_allocate_data_block+0x10df/0x3410 [ 42.706377][ T881] ? _raw_spin_unlock+0x4d/0x70 [ 42.711066][ T881] ? f2fs_dirty_inode+0x233/0x2a0 [ 42.715929][ T881] __allocate_data_block+0x5be/0xb80 [ 42.721048][ T881] ? f2fs_map_blocks+0x3ab0/0x3ab0 [ 42.725993][ T881] ? xas_find+0x208/0x820 [pid 855] futex(0x7f754672a748, FUTEX_WAIT_PRIVATE, 0, NULL [pid 854] exit_group(0 [pid 855] <... futex resumed>) = ? [pid 854] <... exit_group resumed>) = ? [pid 855] +++ exited with 0 +++ [ 42.730244][ T881] f2fs_map_blocks+0x17c0/0x3ab0 [ 42.735025][ T881] ? f2fs_do_map_lock+0x70/0x70 [ 42.739705][ T881] ? __kasan_kmalloc+0x9/0x10 [ 42.744221][ T881] ? filemap_fdatawait_range+0x40/0x40 [ 42.749527][ T881] ? do_syscall_64+0x3b/0xb0 [ 42.753942][ T881] f2fs_iomap_begin+0x29d/0xc10 [ 42.758631][ T881] ? f2fs_destroy_bio_entry_cache+0x20/0x20 [ 42.764358][ T881] ? filemap_write_and_wait_range+0x203/0x280 [ 42.770256][ T881] iomap_iter+0x5b5/0xbe0 [ 42.774438][ T881] ? f2fs_destroy_bio_entry_cache+0x20/0x20 [ 42.780154][ T881] __iomap_dio_rw+0xb3a/0x1ed0 [ 42.784769][ T881] ? f2fs_map_blocks+0x2bf/0x3ab0 [ 42.789613][ T881] ? iomap_dio_complete+0x6f0/0x6f0 [ 42.794645][ T881] ? down_read_trylock+0x3d6/0x7d0 [ 42.799600][ T881] ? f2fs_down_read+0x9f/0x190 [ 42.804198][ T881] ? need_inode_page_update+0x1f0/0x1f0 [ 42.809578][ T881] f2fs_file_write_iter+0x1012/0x2920 [ 42.814783][ T881] ? __kasan_check_write+0x14/0x20 [ 42.819730][ T881] ? f2fs_file_read_iter+0x1050/0x1050 [ 42.825021][ T881] ? _raw_spin_lock+0x1b0/0x1b0 [ 42.829712][ T881] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 42.835207][ T881] ? update_load_avg+0x43a/0x1150 [ 42.840142][ T881] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 42.845607][ T881] ? update_load_avg+0x43a/0x1150 [ 42.850470][ T881] do_iter_readv_writev+0x58e/0x790 [ 42.855501][ T881] ? generic_file_rw_checks+0x270/0x270 [ 42.860884][ T881] ? fsnotify_perm+0x6a/0x5b0 [ 42.865396][ T881] ? security_file_permission+0x86/0xb0 [ 42.870781][ T881] do_iter_write+0x1f1/0x760 [ 42.875204][ T881] vfs_writev+0x2ac/0x560 [ 42.879374][ T881] ? do_writev+0x340/0x340 [ 42.883626][ T881] ? __fget_files+0x31e/0x380 [ 42.888136][ T881] ? __fdget+0x1bc/0x240 [ 42.892217][ T881] __se_sys_pwritev2+0x1c6/0x2c0 [ 42.897002][ T881] ? __x64_sys_pwritev2+0x100/0x100 [ 42.902027][ T881] ? __kasan_check_write+0x14/0x20 [ 42.906976][ T881] __x64_sys_pwritev2+0xe5/0x100 [ 42.911750][ T881] x64_sys_call+0x8b0/0x9a0 [ 42.916083][ T881] do_syscall_64+0x3b/0xb0 [ 42.920339][ T881] ? clear_bhb_loop+0x35/0x90 [ 42.924852][ T881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 42.930582][ T881] RIP: 0033:0x7f754669d469 [ 42.934851][ T881] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.954281][ T881] RSP: 002b:00007f7546636208 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 42.962522][ T881] RAX: ffffffffffffffda RBX: 00007f754672a758 RCX: 00007f754669d469 [ 42.970333][ T881] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000008 [ 42.978143][ T881] RBP: 00007f754672a750 R08: 0000000000000007 R09: 0000000000000003 [ 42.985955][ T881] R10: 0000000000002000 R11: 0000000000000246 R12: 00007f75466f668c [ 42.993767][ T881] R13: 00007f75466f1140 R14: 0034656c69662f2e R15: 3435313230386c6e [ 43.001583][ T881] [ 43.004440][ T881] Modules linked in: [ 43.009758][ T881] ---[ end trace da080ec9267669fd ]--- [ 43.015072][ T881] RIP: 0010:update_sit_entry+0x5f3/0x1070 [pid 869] <... close resumed>) = 0 [pid 869] mkdir("./file4", 0777) = 0 [ 43.020844][ T881] Code: c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 45 e4 86 ff 4c 8b 33 4c 03 75 a8 4d 89 f4 49 c1 ec 03 49 bd 00 00 00 00 00 fc ff df <43> 0f b6 04 2c 84 c0 0f 85 0d 09 00 00 41 0f b6 1e 41 89 df 8b 45 [ 43.043109][ T881] RSP: 0018:ffffc9000283ec68 EFLAGS: 00010246 [ 43.049014][ T881] RAX: 1ffff1102205f23a RBX: ffff8881102f91d0 RCX: 0000000000000037 [ 43.057115][ T881] RDX: ffff888119f82780 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.065680][ T881] RBP: ffffc9000283ecf0 R08: ffffffff822bd7dd R09: ffffffff822bd33c [ 43.073660][ T881] R10: 0000000000000003 R11: ffff888119f82780 R12: 0000000000000000 [ 43.081721][ T881] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff110237980b0 [ 43.089516][ T881] FS: 00007f75466366c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 43.098319][ T881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.108859][ T869] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 43.109133][ T881] CR2: 00007f75466f0528 CR3: 0000000118e55000 CR4: 00000000003506a0 [ 43.120421][ T869] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.123853][ T881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.147142][ T881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.151665][ T869] F2FS-fs (loop1): fault_injection options not supported [ 43.155328][ T881] Kernel panic - not syncing: Fatal exception [ 43.162136][ T869] F2FS-fs (loop1): fault_type options not supported [ 43.167926][ T881] Kernel Offset: disabled [ 43.178474][ T881] Rebooting in 86400 seconds..