./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor356690468 <...> 10211] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10211] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10211] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10211] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10211] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10212 attached [pid 10212] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10211] <... clone3 resumed> => {parent_tid=[10212]}, 88) = 10212 [pid 10212] <... rseq resumed>) = 0 [pid 10211] rt_sigprocmask(SIG_SETMASK, [], [pid 10212] set_robust_list(0x7f55300e29a0, 24 [pid 10211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10212] <... set_robust_list resumed>) = 0 [pid 10212] rt_sigprocmask(SIG_SETMASK, [], [pid 10211] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10212] memfd_create("syzkaller", 0 [pid 10211] <... futex resumed>) = 0 [pid 10211] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10212] <... memfd_create resumed>) = 3 [pid 10211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10211] <... mmap resumed>) = 0x7f55300a1000 [pid 10212] <... mmap resumed>) = 0x7f5527ca1000 [pid 10211] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10211] <... mprotect resumed>) = 0 [pid 10211] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10211] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10213 attached => {parent_tid=[10213]}, 88) = 10213 [pid 10211] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10213] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10211] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10213] <... rseq resumed>) = 0 [pid 10213] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10213] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10213] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10211] <... futex resumed>) = 0 [pid 10213] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10213] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10211] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10212] <... write resumed>) = 262144 [pid 10211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10212] munmap(0x7f5527ca1000, 262144 [pid 10211] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10213] <... futex resumed>) = 0 [pid 10211] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10212] <... munmap resumed>) = 0 [pid 10213] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10212] ioctl(5, LOOP_SET_FD, 3 [pid 10213] <... mount resumed>) = 0 [pid 10213] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10213] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10211] <... futex resumed>) = 0 [pid 10211] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10213] <... futex resumed>) = 0 [pid 10211] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10213] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10213] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10211] <... futex resumed>) = 0 [pid 10213] <... futex resumed>) = 1 [pid 10213] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10211] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10213] <... futex resumed>) = 0 [pid 10211] <... futex resumed>) = 1 [pid 10213] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10212] <... ioctl resumed>) = 0 [pid 10211] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10212] close(3) = 0 [pid 10212] mkdir("./file1", 0777) = 0 [pid 10212] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10212] ioctl(5, LOOP_CLR_FD) = 0 [pid 10213] <... write resumed>) = 262144 [pid 10212] close(5 [pid 10213] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10213] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10212] <... close resumed>) = 0 [pid 10211] <... futex resumed>) = 0 [pid 10212] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10212] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10211] exit_group(0 [pid 10213] <... futex resumed>) = ? [pid 10212] <... futex resumed>) = ? [pid 10211] <... exit_group resumed>) = ? [pid 10213] +++ exited with 0 +++ [pid 10212] +++ exited with 0 +++ [pid 10211] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10211, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1069", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1069", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1069/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1069/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1069/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1069/bus") = 0 [pid 5052] umount2("./1069/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1069/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1069/binderfs") = 0 [pid 5052] umount2("./1069/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1069/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1069/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1069/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1069/file1") = 0 [ 257.832784][T10212] loop0: detected capacity change from 0 to 512 [ 257.844535][T10212] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1069") = 0 [pid 5052] mkdir("./1070", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10214 attached , child_tidptr=0x555556d60690) = 10214 [pid 10214] set_robust_list(0x555556d606a0, 24) = 0 [pid 10214] chdir("./1070") = 0 [pid 10214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10214] setpgid(0, 0) = 0 [pid 10214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10214] write(3, "1000", 4) = 4 [pid 10214] close(3) = 0 [pid 10214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10214] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10214] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10214] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10214] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10214] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10215]}, 88) = 10215 [pid 10214] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10214] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10214] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 ./strace-static-x86_64: Process 10215 attached [pid 10215] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10214] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10215] <... rseq resumed>) = 0 [pid 10215] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10214] <... mprotect resumed>) = 0 [pid 10215] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10214] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10215] memfd_create("syzkaller", 0 [pid 10214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10215] <... memfd_create resumed>) = 3 [pid 10215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 10216 attached ) = 0x7f5527ca1000 [pid 10216] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10214] <... clone3 resumed> => {parent_tid=[10216]}, 88) = 10216 [pid 10216] <... rseq resumed>) = 0 [pid 10214] rt_sigprocmask(SIG_SETMASK, [], [pid 10216] set_robust_list(0x7f55300c19a0, 24 [pid 10214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10216] <... set_robust_list resumed>) = 0 [pid 10214] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10216] rt_sigprocmask(SIG_SETMASK, [], [pid 10214] <... futex resumed>) = 0 [pid 10216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10214] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10216] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10216] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10214] <... futex resumed>) = 0 [pid 10214] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10214] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10216] <... futex resumed>) = 1 [pid 10216] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10216] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10214] <... futex resumed>) = 0 [pid 10214] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10214] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10216] <... futex resumed>) = 1 [pid 10216] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10216] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10215] <... write resumed>) = 262144 [pid 10214] <... futex resumed>) = 0 [pid 10214] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10216] <... futex resumed>) = 1 [pid 10214] <... futex resumed>) = 0 [pid 10216] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10214] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10216] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10216] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10214] <... futex resumed>) = 0 [pid 10216] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10215] munmap(0x7f5527ca1000, 262144) = 0 [pid 10215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10215] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10215] close(3) = 0 [pid 10215] mkdir("./file1", 0777) = 0 [pid 10215] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10215] ioctl(6, LOOP_CLR_FD) = 0 [pid 10215] close(6) = 0 [pid 10215] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10214] exit_group(0 [pid 10216] <... futex resumed>) = ? [pid 10214] <... exit_group resumed>) = ? [pid 10216] +++ exited with 0 +++ [pid 10215] <... futex resumed>) = ? [pid 10215] +++ exited with 0 +++ [pid 10214] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10214, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1070", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1070", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1070/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1070/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1070/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1070/bus") = 0 [pid 5052] umount2("./1070/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1070/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1070/binderfs") = 0 [pid 5052] umount2("./1070/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1070/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1070/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1070/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1070/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1070") = 0 [pid 5052] mkdir("./1071", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 257.958893][T10215] loop0: detected capacity change from 0 to 512 [ 257.970621][T10215] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10217 attached , child_tidptr=0x555556d60690) = 10217 [pid 10217] set_robust_list(0x555556d606a0, 24) = 0 [pid 10217] chdir("./1071") = 0 [pid 10217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10217] setpgid(0, 0) = 0 [pid 10217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10217] write(3, "1000", 4) = 4 [pid 10217] close(3) = 0 [pid 10217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10217] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10217] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10217] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10217] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10217] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10217] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10218 attached => {parent_tid=[10218]}, 88) = 10218 [pid 10217] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10217] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10217] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10217] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10218] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10217] <... mprotect resumed>) = 0 [pid 10217] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10218] <... rseq resumed>) = 0 [pid 10218] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10218] rt_sigprocmask(SIG_SETMASK, [], [pid 10217] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10217] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10218] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 10219 attached [pid 10218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10217] <... clone3 resumed> => {parent_tid=[10219]}, 88) = 10219 [pid 10219] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10218] <... mmap resumed>) = 0x7f5527ca1000 [pid 10219] <... rseq resumed>) = 0 [pid 10217] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10217] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10217] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10219] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10219] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10219] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10217] <... futex resumed>) = 0 [pid 10217] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10217] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10219] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10219] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10217] <... futex resumed>) = 0 [pid 10219] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10217] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10217] <... futex resumed>) = 0 [pid 10219] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10217] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10219] <... open resumed>) = 5 [pid 10219] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10217] <... futex resumed>) = 0 [pid 10219] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10217] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10217] <... futex resumed>) = 0 [pid 10219] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10217] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10219] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10218] <... write resumed>) = 262144 [pid 10219] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10217] <... futex resumed>) = 0 [pid 10219] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10218] munmap(0x7f5527ca1000, 262144) = 0 [pid 10218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10218] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10218] close(3) = 0 [pid 10218] mkdir("./file1", 0777) = 0 [pid 10218] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10218] ioctl(6, LOOP_CLR_FD) = 0 [pid 10218] close(6) = 0 [pid 10218] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10218] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10217] exit_group(0) = ? [pid 10219] <... futex resumed>) = ? [pid 10218] <... futex resumed>) = ? [pid 10219] +++ exited with 0 +++ [pid 10218] +++ exited with 0 +++ [pid 10217] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10217, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] umount2("./1071", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1071", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1071/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1071/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1071/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1071/bus") = 0 [pid 5052] umount2("./1071/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1071/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1071/binderfs") = 0 [pid 5052] umount2("./1071/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1071/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1071/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1071/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1071/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1071") = 0 [ 258.075178][T10218] loop0: detected capacity change from 0 to 512 [ 258.088740][T10218] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1072", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10220 attached , child_tidptr=0x555556d60690) = 10220 [pid 10220] set_robust_list(0x555556d606a0, 24) = 0 [pid 10220] chdir("./1072") = 0 [pid 10220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10220] setpgid(0, 0) = 0 [pid 10220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10220] write(3, "1000", 4) = 4 [pid 10220] close(3) = 0 [pid 10220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10220] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10220] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10220] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10220] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10220] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10221]}, 88) = 10221 ./strace-static-x86_64: Process 10221 attached [pid 10220] rt_sigprocmask(SIG_SETMASK, [], [pid 10221] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10221] <... rseq resumed>) = 0 [pid 10221] set_robust_list(0x7f55300e29a0, 24 [pid 10220] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10221] <... set_robust_list resumed>) = 0 [pid 10220] <... futex resumed>) = 0 [pid 10221] rt_sigprocmask(SIG_SETMASK, [], [pid 10220] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10221] memfd_create("syzkaller", 0 [pid 10220] <... futex resumed>) = 0 [pid 10220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10221] <... memfd_create resumed>) = 3 [pid 10221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10220] <... mmap resumed>) = 0x7f55300a1000 [pid 10221] <... mmap resumed>) = 0x7f5527ca1000 [pid 10220] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10220] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10220] <... clone3 resumed> => {parent_tid=[10222]}, 88) = 10222 [pid 10220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10220] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10220] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10222 attached [pid 10222] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10222] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10222] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10222] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10222] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10220] <... futex resumed>) = 0 [pid 10222] <... futex resumed>) = 1 [pid 10222] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10220] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10220] <... futex resumed>) = 0 [pid 10222] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10220] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10222] <... mount resumed>) = 0 [pid 10222] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10220] <... futex resumed>) = 0 [pid 10222] <... futex resumed>) = 1 [pid 10221] <... write resumed>) = 262144 [pid 10222] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10221] munmap(0x7f5527ca1000, 262144 [pid 10220] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10222] <... open resumed>) = 5 [pid 10220] <... futex resumed>) = 0 [pid 10222] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10220] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10222] <... futex resumed>) = 0 [pid 10220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10222] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10220] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10221] <... munmap resumed>) = 0 [pid 10220] <... futex resumed>) = 0 [pid 10222] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10221] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10220] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10222] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10222] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10221] <... openat resumed>) = 6 [pid 10222] <... futex resumed>) = 1 [pid 10220] <... futex resumed>) = 0 [pid 10221] ioctl(6, LOOP_SET_FD, 3 [pid 10222] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10221] <... ioctl resumed>) = 0 [pid 10221] close(3) = 0 [pid 10221] mkdir("./file1", 0777) = 0 [pid 10221] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10221] ioctl(6, LOOP_CLR_FD) = 0 [pid 10221] close(6) = 0 [pid 10221] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10220] exit_group(0 [pid 10221] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 10220] <... exit_group resumed>) = ? [pid 10222] <... futex resumed>) = ? [pid 10221] +++ exited with 0 +++ [pid 10222] +++ exited with 0 +++ [pid 10220] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10220, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1072", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1072", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1072/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1072/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1072/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1072/bus") = 0 [pid 5052] umount2("./1072/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1072/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1072/binderfs") = 0 [pid 5052] umount2("./1072/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1072/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1072/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1072/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1072/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1072") = 0 [ 258.182295][T10221] loop0: detected capacity change from 0 to 512 [ 258.191309][T10221] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1073", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10223 attached , child_tidptr=0x555556d60690) = 10223 [pid 10223] set_robust_list(0x555556d606a0, 24) = 0 [pid 10223] chdir("./1073") = 0 [pid 10223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10223] setpgid(0, 0) = 0 [pid 10223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10223] write(3, "1000", 4) = 4 [pid 10223] close(3) = 0 [pid 10223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10223] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10223] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10223] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10223] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10223] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10224 attached [pid 10224] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10224] set_robust_list(0x7f55300e29a0, 24 [pid 10223] <... clone3 resumed> => {parent_tid=[10224]}, 88) = 10224 [pid 10224] <... set_robust_list resumed>) = 0 [pid 10223] rt_sigprocmask(SIG_SETMASK, [], [pid 10224] rt_sigprocmask(SIG_SETMASK, [], [pid 10223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10223] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10224] memfd_create("syzkaller", 0 [pid 10223] <... futex resumed>) = 0 [pid 10223] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10224] <... memfd_create resumed>) = 3 [pid 10223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10223] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10223] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10225 attached => {parent_tid=[10225]}, 88) = 10225 [pid 10223] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10223] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10225] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10223] <... futex resumed>) = 0 [pid 10223] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10225] <... rseq resumed>) = 0 [pid 10225] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10225] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10225] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10223] <... futex resumed>) = 0 [pid 10225] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10224] <... write resumed>) = 262144 [pid 10223] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10223] <... futex resumed>) = 0 [pid 10223] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10224] munmap(0x7f5527ca1000, 262144 [pid 10225] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10224] <... munmap resumed>) = 0 [pid 10224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10224] ioctl(5, LOOP_SET_FD, 3 [pid 10225] <... mount resumed>) = 0 [pid 10225] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10225] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10223] <... futex resumed>) = 0 [pid 10223] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10225] <... futex resumed>) = 0 [pid 10223] <... futex resumed>) = 1 [pid 10225] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10224] <... ioctl resumed>) = 0 [pid 10223] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10224] close(3 [pid 10225] <... open resumed>) = 6 [pid 10225] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10224] <... close resumed>) = 0 [pid 10225] <... futex resumed>) = 1 [pid 10223] <... futex resumed>) = 0 [pid 10225] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10223] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10223] <... futex resumed>) = 0 [pid 10225] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10223] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10224] mkdir("./file1", 0777) = 0 [pid 10224] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10224] ioctl(5, LOOP_CLR_FD) = 0 [pid 10224] close(5) = 0 [pid 10224] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10224] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10225] <... write resumed>) = 262144 [pid 10225] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10223] <... futex resumed>) = 0 [pid 10225] <... futex resumed>) = 1 [pid 10223] exit_group(0 [pid 10224] <... futex resumed>) = ? [pid 10223] <... exit_group resumed>) = ? [pid 10225] +++ exited with 0 +++ [pid 10224] +++ exited with 0 +++ [pid 10223] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10223, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1073", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1073", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1073/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1073/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1073/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1073/bus") = 0 [pid 5052] umount2("./1073/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 258.288641][T10224] loop0: detected capacity change from 0 to 512 [ 258.302092][T10224] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1073/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1073/binderfs") = 0 [pid 5052] umount2("./1073/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1073/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1073/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1073/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1073/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1073") = 0 [pid 5052] mkdir("./1074", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10226 attached , child_tidptr=0x555556d60690) = 10226 [pid 10226] set_robust_list(0x555556d606a0, 24) = 0 [pid 10226] chdir("./1074") = 0 [pid 10226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10226] setpgid(0, 0) = 0 [pid 10226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10226] write(3, "1000", 4) = 4 [pid 10226] close(3) = 0 [pid 10226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10226] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10226] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10226] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10226] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10227 attached [pid 10227] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10226] <... clone3 resumed> => {parent_tid=[10227]}, 88) = 10227 [pid 10227] <... rseq resumed>) = 0 [pid 10226] rt_sigprocmask(SIG_SETMASK, [], [pid 10227] set_robust_list(0x7f55300e29a0, 24 [pid 10226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10227] <... set_robust_list resumed>) = 0 [pid 10226] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10227] rt_sigprocmask(SIG_SETMASK, [], [pid 10226] <... futex resumed>) = 0 [pid 10227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10226] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10227] memfd_create("syzkaller", 0 [pid 10226] <... futex resumed>) = 0 [pid 10227] <... memfd_create resumed>) = 3 [pid 10226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10226] <... mmap resumed>) = 0x7f55300a1000 [pid 10227] <... mmap resumed>) = 0x7f5527ca1000 [pid 10226] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10226] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10226] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10228]}, 88) = 10228 [pid 10226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10226] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10226] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10228 attached [pid 10228] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10228] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10228] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10228] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10227] <... write resumed>) = 262144 [pid 10227] munmap(0x7f5527ca1000, 262144 [pid 10228] <... open resumed>) = 4 [pid 10228] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10226] <... futex resumed>) = 0 [pid 10228] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10226] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10227] <... munmap resumed>) = 0 [pid 10226] <... futex resumed>) = 0 [pid 10227] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10226] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10228] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10227] <... openat resumed>) = 5 [pid 10227] ioctl(5, LOOP_SET_FD, 3 [pid 10228] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10228] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10226] <... futex resumed>) = 0 [pid 10226] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10228] <... futex resumed>) = 0 [pid 10226] <... futex resumed>) = 1 [pid 10228] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10226] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10228] <... open resumed>) = 6 [pid 10228] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10226] <... futex resumed>) = 0 [pid 10228] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10226] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10226] <... futex resumed>) = 0 [pid 10228] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10226] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10228] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10228] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10226] <... futex resumed>) = 0 [pid 10228] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10227] <... ioctl resumed>) = 0 [pid 10227] close(3) = 0 [pid 10227] mkdir("./file1", 0777) = 0 [pid 10227] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10227] ioctl(5, LOOP_CLR_FD) = 0 [pid 10227] close(5) = 0 [pid 10227] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10226] exit_group(0 [pid 10227] <... futex resumed>) = 0 [pid 10226] <... exit_group resumed>) = ? [pid 10227] +++ exited with 0 +++ [pid 10228] <... futex resumed>) = ? [pid 10228] +++ exited with 0 +++ [pid 10226] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10226, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1074", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1074", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1074/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1074/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1074/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1074/bus") = 0 [pid 5052] umount2("./1074/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1074/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1074/binderfs") = 0 [pid 5052] umount2("./1074/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1074/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1074/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1074/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1074/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1074") = 0 [pid 5052] mkdir("./1075", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10229 attached , child_tidptr=0x555556d60690) = 10229 [pid 10229] set_robust_list(0x555556d606a0, 24) = 0 [pid 10229] chdir("./1075") = 0 [pid 10229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10229] setpgid(0, 0) = 0 [pid 10229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10229] write(3, "1000", 4) = 4 [pid 10229] close(3) = 0 [pid 10229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10229] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10229] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10229] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10229] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10229] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 258.403745][T10227] loop0: detected capacity change from 0 to 512 [ 258.413422][T10227] ext4: Unknown parameter 'nouser_xattr' [pid 10229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10230 attached => {parent_tid=[10230]}, 88) = 10230 [pid 10230] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10229] rt_sigprocmask(SIG_SETMASK, [], [pid 10230] <... rseq resumed>) = 0 [pid 10229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10230] set_robust_list(0x7f55300e29a0, 24 [pid 10229] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10230] <... set_robust_list resumed>) = 0 [pid 10229] <... futex resumed>) = 0 [pid 10230] rt_sigprocmask(SIG_SETMASK, [], [pid 10229] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10229] <... futex resumed>) = 0 [pid 10230] memfd_create("syzkaller", 0 [pid 10229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10230] <... memfd_create resumed>) = 3 [pid 10229] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10229] <... mprotect resumed>) = 0 [pid 10230] <... mmap resumed>) = 0x7f5527ca1000 [pid 10229] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10229] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10231]}, 88) = 10231 [pid 10229] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10229] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10229] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10231 attached [pid 10231] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10231] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10231] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10231] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10231] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10229] <... futex resumed>) = 0 [pid 10231] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10229] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10229] <... futex resumed>) = 0 [pid 10229] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10231] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10231] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10229] <... futex resumed>) = 0 [pid 10229] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10229] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10231] <... futex resumed>) = 1 [pid 10231] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10230] <... write resumed>) = 262144 [pid 10231] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10229] <... futex resumed>) = 0 [pid 10231] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10229] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10231] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10229] <... futex resumed>) = 0 [pid 10231] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10229] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10231] <... futex resumed>) = 0 [pid 10230] munmap(0x7f5527ca1000, 262144 [pid 10229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10231] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10230] <... munmap resumed>) = 0 [pid 10230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10230] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10230] close(3) = 0 [pid 10230] mkdir("./file1", 0777) = 0 [pid 10230] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10230] ioctl(6, LOOP_CLR_FD) = 0 [pid 10230] close(6) = 0 [pid 10230] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10230] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10229] exit_group(0 [pid 10231] <... futex resumed>) = ? [pid 10229] <... exit_group resumed>) = ? [pid 10230] <... futex resumed>) = ? [pid 10231] +++ exited with 0 +++ [pid 10230] +++ exited with 0 +++ [pid 10229] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10229, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1075", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1075", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1075/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1075/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1075/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1075/bus") = 0 [pid 5052] umount2("./1075/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1075/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1075/binderfs") = 0 [pid 5052] umount2("./1075/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1075/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1075/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1075/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1075/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 258.487936][T10230] loop0: detected capacity change from 0 to 512 [ 258.499295][T10230] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1075") = 0 [pid 5052] mkdir("./1076", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10232 attached , child_tidptr=0x555556d60690) = 10232 [pid 10232] set_robust_list(0x555556d606a0, 24) = 0 [pid 10232] chdir("./1076") = 0 [pid 10232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10232] setpgid(0, 0) = 0 [pid 10232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10232] write(3, "1000", 4) = 4 [pid 10232] close(3) = 0 [pid 10232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10232] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10232] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10232] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10232] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10232] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10233]}, 88) = 10233 ./strace-static-x86_64: Process 10233 attached [pid 10233] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10232] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10233] <... rseq resumed>) = 0 [pid 10232] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10233] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10232] <... futex resumed>) = 0 [pid 10233] rt_sigprocmask(SIG_SETMASK, [], [pid 10232] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10232] <... futex resumed>) = 0 [pid 10233] memfd_create("syzkaller", 0 [pid 10232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10233] <... memfd_create resumed>) = 3 [pid 10233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10232] <... mmap resumed>) = 0x7f55300a1000 [pid 10232] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10232] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10234 attached [pid 10234] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10232] <... clone3 resumed> => {parent_tid=[10234]}, 88) = 10234 [pid 10234] set_robust_list(0x7f55300c19a0, 24 [pid 10232] rt_sigprocmask(SIG_SETMASK, [], [pid 10234] <... set_robust_list resumed>) = 0 [pid 10232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10234] rt_sigprocmask(SIG_SETMASK, [], [pid 10232] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10234] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10232] <... futex resumed>) = 0 [pid 10234] <... open resumed>) = 4 [pid 10232] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10234] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10232] <... futex resumed>) = 0 [pid 10232] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10232] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10234] <... futex resumed>) = 1 [pid 10234] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10234] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10233] <... write resumed>) = 262144 [pid 10232] <... futex resumed>) = 0 [pid 10232] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10234] <... futex resumed>) = 1 [pid 10232] <... futex resumed>) = 0 [pid 10234] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10232] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10234] <... open resumed>) = 5 [pid 10234] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10232] <... futex resumed>) = 0 [pid 10232] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10234] <... futex resumed>) = 1 [pid 10232] <... futex resumed>) = 0 [pid 10232] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10234] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10234] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10232] <... futex resumed>) = 0 [pid 10234] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10233] munmap(0x7f5527ca1000, 262144) = 0 [pid 10233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10233] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10233] close(3) = 0 [pid 10233] mkdir("./file1", 0777) = 0 [pid 10233] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10233] ioctl(6, LOOP_CLR_FD) = 0 [pid 10233] close(6) = 0 [pid 10233] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10232] exit_group(0) = ? [pid 10234] <... futex resumed>) = ? [pid 10234] +++ exited with 0 +++ [pid 10233] <... futex resumed>) = ? [pid 10233] +++ exited with 0 +++ [pid 10232] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10232, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1076", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1076", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1076/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1076/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1076/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1076/bus") = 0 [pid 5052] umount2("./1076/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1076/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1076/binderfs") = 0 [pid 5052] umount2("./1076/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1076/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1076/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1076/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1076/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 258.604189][T10233] loop0: detected capacity change from 0 to 512 [ 258.617343][T10233] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1076") = 0 [pid 5052] mkdir("./1077", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10235 attached , child_tidptr=0x555556d60690) = 10235 [pid 10235] set_robust_list(0x555556d606a0, 24) = 0 [pid 10235] chdir("./1077") = 0 [pid 10235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10235] setpgid(0, 0) = 0 [pid 10235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10235] write(3, "1000", 4) = 4 [pid 10235] close(3) = 0 [pid 10235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10235] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10235] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10235] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10235] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10235] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10236 attached => {parent_tid=[10236]}, 88) = 10236 [pid 10235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10235] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10236] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10235] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10236] <... rseq resumed>) = 0 [pid 10235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10236] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10235] <... mmap resumed>) = 0x7f55300a1000 [pid 10235] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10236] rt_sigprocmask(SIG_SETMASK, [], [pid 10235] <... mprotect resumed>) = 0 [pid 10236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10235] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10236] memfd_create("syzkaller", 0 [pid 10235] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10236] <... memfd_create resumed>) = 3 [pid 10235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 10237 attached ) = 0x7f5527ca1000 [pid 10237] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10235] <... clone3 resumed> => {parent_tid=[10237]}, 88) = 10237 [pid 10235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10235] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10237] <... rseq resumed>) = 0 [pid 10236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10235] <... futex resumed>) = 0 [pid 10237] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10235] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10237] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10237] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10236] <... write resumed>) = 262144 [pid 10237] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10236] munmap(0x7f5527ca1000, 262144) = 0 [pid 10236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10237] <... futex resumed>) = 1 [pid 10235] <... futex resumed>) = 0 [pid 10235] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10237] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10235] <... futex resumed>) = 0 [pid 10236] ioctl(5, LOOP_SET_FD, 3 [pid 10235] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10237] <... mount resumed>) = 0 [pid 10237] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10237] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10235] <... futex resumed>) = 0 [pid 10235] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10235] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10237] <... futex resumed>) = 0 [pid 10237] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10237] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10235] <... futex resumed>) = 0 [pid 10237] <... futex resumed>) = 1 [pid 10235] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10237] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10235] <... futex resumed>) = 0 [pid 10236] <... ioctl resumed>) = 0 [pid 10235] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10236] close(3) = 0 [pid 10236] mkdir("./file1", 0777) = 0 [pid 10236] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10236] ioctl(5, LOOP_CLR_FD [pid 10237] <... write resumed>) = 262144 [pid 10236] <... ioctl resumed>) = 0 [pid 10236] close(5 [pid 10237] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10237] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10235] <... futex resumed>) = 0 [pid 10236] <... close resumed>) = 0 [pid 10236] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10236] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10235] exit_group(0 [pid 10237] <... futex resumed>) = ? [pid 10237] +++ exited with 0 +++ [pid 10236] <... futex resumed>) = ? [pid 10236] +++ exited with 0 +++ [pid 10235] <... exit_group resumed>) = ? [pid 10235] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10235, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1077", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1077", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1077/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1077/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1077/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1077/bus") = 0 [pid 5052] umount2("./1077/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1077/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1077/binderfs") = 0 [pid 5052] umount2("./1077/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1077/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1077/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1077/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1077/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1077") = 0 [pid 5052] mkdir("./1078", 0777) = 0 [ 258.714195][T10236] loop0: detected capacity change from 0 to 512 [ 258.727173][T10236] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10238 attached , child_tidptr=0x555556d60690) = 10238 [pid 10238] set_robust_list(0x555556d606a0, 24) = 0 [pid 10238] chdir("./1078") = 0 [pid 10238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10238] setpgid(0, 0) = 0 [pid 10238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10238] write(3, "1000", 4) = 4 [pid 10238] close(3) = 0 [pid 10238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10238] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10238] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10238] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10238] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10238] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10238] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10239 attached [pid 10239] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10238] <... clone3 resumed> => {parent_tid=[10239]}, 88) = 10239 [pid 10239] <... rseq resumed>) = 0 [pid 10239] set_robust_list(0x7f55300e29a0, 24 [pid 10238] rt_sigprocmask(SIG_SETMASK, [], [pid 10239] <... set_robust_list resumed>) = 0 [pid 10238] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10239] rt_sigprocmask(SIG_SETMASK, [], [pid 10238] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10239] memfd_create("syzkaller", 0 [pid 10238] <... futex resumed>) = 0 [pid 10239] <... memfd_create resumed>) = 3 [pid 10238] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10238] <... futex resumed>) = 0 [pid 10239] <... mmap resumed>) = 0x7f5527cc2000 [pid 10238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5527ca1000 [pid 10238] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10238] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10238] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10238] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10240 attached [pid 10240] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10238] <... clone3 resumed> => {parent_tid=[10240]}, 88) = 10240 [pid 10240] <... rseq resumed>) = 0 [pid 10238] rt_sigprocmask(SIG_SETMASK, [], [pid 10240] set_robust_list(0x7f5527cc19a0, 24) = 0 [pid 10238] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10240] rt_sigprocmask(SIG_SETMASK, [], [pid 10238] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10240] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10238] <... futex resumed>) = 0 [pid 10240] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10238] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10240] <... open resumed>) = 4 [pid 10240] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10238] <... futex resumed>) = 0 [pid 10240] <... futex resumed>) = 1 [pid 10238] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10240] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10238] <... futex resumed>) = 0 [pid 10238] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10240] <... mount resumed>) = 0 [pid 10239] <... write resumed>) = 262144 [pid 10240] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10240] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10238] <... futex resumed>) = 0 [pid 10239] munmap(0x7f5527cc2000, 262144 [pid 10238] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10240] <... futex resumed>) = 0 [pid 10240] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10238] <... futex resumed>) = 1 [pid 10240] <... open resumed>) = 5 [pid 10239] <... munmap resumed>) = 0 [pid 10238] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10239] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10240] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10239] <... openat resumed>) = 6 [pid 10238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10240] <... futex resumed>) = 0 [pid 10239] ioctl(6, LOOP_SET_FD, 3 [pid 10238] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10240] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10239] <... ioctl resumed>) = 0 [pid 10238] <... futex resumed>) = 0 [pid 10238] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10239] close(3) = 0 [pid 10239] mkdir("./file1", 0777) = 0 [pid 10239] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10239] ioctl(6, LOOP_CLR_FD) = 0 [pid 10239] close(6 [pid 10240] <... write resumed>) = 262144 [pid 10240] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10239] <... close resumed>) = 0 [pid 10239] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10240] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10238] <... futex resumed>) = 0 [pid 10238] exit_group(0 [pid 10239] <... futex resumed>) = 0 [pid 10240] <... futex resumed>) = ? [pid 10238] <... exit_group resumed>) = ? [pid 10240] +++ exited with 0 +++ [pid 10239] +++ exited with 0 +++ [pid 10238] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10238, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1078", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1078", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1078/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1078/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1078/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1078/bus") = 0 [pid 5052] umount2("./1078/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1078/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1078/binderfs") = 0 [pid 5052] umount2("./1078/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1078/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1078/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1078/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1078/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1078") = 0 [pid 5052] mkdir("./1079", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10241 attached , child_tidptr=0x555556d60690) = 10241 [pid 10241] set_robust_list(0x555556d606a0, 24) = 0 [pid 10241] chdir("./1079") = 0 [pid 10241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10241] setpgid(0, 0) = 0 [pid 10241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10241] write(3, "1000", 4) = 4 [pid 10241] close(3) = 0 [pid 10241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10241] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10241] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10241] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10241] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10241] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 258.826077][T10239] loop0: detected capacity change from 0 to 512 [ 258.837889][T10239] ext4: Unknown parameter 'nouser_xattr' [pid 10241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10242 attached => {parent_tid=[10242]}, 88) = 10242 [pid 10241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10241] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10241] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10241] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10241] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10243 attached => {parent_tid=[10243]}, 88) = 10243 [pid 10243] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10241] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10243] <... rseq resumed>) = 0 [pid 10241] <... futex resumed>) = 0 [pid 10243] set_robust_list(0x7f55300c19a0, 24 [pid 10241] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10243] <... set_robust_list resumed>) = 0 [pid 10243] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10243] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 3 [pid 10242] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10243] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10241] <... futex resumed>) = 0 [pid 10241] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10241] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10243] <... futex resumed>) = 1 [pid 10243] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10243] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10242] <... rseq resumed>) = 0 [pid 10241] <... futex resumed>) = 0 [pid 10241] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10243] <... futex resumed>) = 1 [pid 10241] <... futex resumed>) = 0 [pid 10243] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10241] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10243] <... open resumed>) = 4 [pid 10242] set_robust_list(0x7f55300e29a0, 24 [pid 10243] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10242] <... set_robust_list resumed>) = 0 [pid 10242] rt_sigprocmask(SIG_SETMASK, [], [pid 10241] <... futex resumed>) = 0 [pid 10243] <... futex resumed>) = 1 [pid 10242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10241] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10243] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10242] memfd_create("syzkaller", 0 [pid 10241] <... futex resumed>) = 0 [pid 10243] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10241] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10243] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10243] <... futex resumed>) = 0 [pid 10242] <... memfd_create resumed>) = 5 [pid 10243] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10242] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10242] munmap(0x7f5527ca1000, 262144) = 0 [pid 10242] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10242] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 10242] close(5) = 0 [pid 10242] mkdir("./file1", 0777) = 0 [pid 10242] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10242] ioctl(6, LOOP_CLR_FD) = 0 [pid 10242] close(6) = 0 [pid 10242] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10241] exit_group(0 [pid 10243] <... futex resumed>) = ? [pid 10243] +++ exited with 0 +++ [pid 10241] <... exit_group resumed>) = ? [pid 10242] <... futex resumed>) = ? [pid 10242] +++ exited with 0 +++ [pid 10241] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10241, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1079", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1079", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1079/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1079/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1079/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1079/bus") = 0 [pid 5052] umount2("./1079/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1079/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1079/binderfs") = 0 [pid 5052] umount2("./1079/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1079/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1079/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1079/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1079/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1079") = 0 [pid 5052] mkdir("./1080", 0777) = 0 [ 258.921589][T10242] loop0: detected capacity change from 0 to 512 [ 258.936336][T10242] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10244 attached , child_tidptr=0x555556d60690) = 10244 [pid 10244] set_robust_list(0x555556d606a0, 24) = 0 [pid 10244] chdir("./1080") = 0 [pid 10244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10244] setpgid(0, 0) = 0 [pid 10244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10244] write(3, "1000", 4) = 4 [pid 10244] close(3) = 0 [pid 10244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10244] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10244] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10244] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10244] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10244] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10245 attached [pid 10245] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10244] <... clone3 resumed> => {parent_tid=[10245]}, 88) = 10245 [pid 10245] <... rseq resumed>) = 0 [pid 10244] rt_sigprocmask(SIG_SETMASK, [], [pid 10245] set_robust_list(0x7f55300e29a0, 24 [pid 10244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10245] <... set_robust_list resumed>) = 0 [pid 10244] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10245] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10244] <... futex resumed>) = 0 [pid 10245] memfd_create("syzkaller", 0 [pid 10244] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10245] <... memfd_create resumed>) = 3 [pid 10244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10244] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10245] <... mmap resumed>) = 0x7f5527ca1000 [pid 10244] <... mprotect resumed>) = 0 [pid 10245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10244] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10246 attached => {parent_tid=[10246]}, 88) = 10246 [pid 10244] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10244] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10244] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10246] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10246] set_robust_list(0x7f55300c19a0, 24 [pid 10245] <... write resumed>) = 262144 [pid 10246] <... set_robust_list resumed>) = 0 [pid 10246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10246] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10245] munmap(0x7f5527ca1000, 262144 [pid 10246] <... open resumed>) = 4 [pid 10246] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10244] <... futex resumed>) = 0 [pid 10246] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10244] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10246] <... futex resumed>) = 0 [pid 10244] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10246] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10245] <... munmap resumed>) = 0 [pid 10246] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10244] <... futex resumed>) = 0 [pid 10246] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10245] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10244] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10245] <... openat resumed>) = 5 [pid 10244] <... futex resumed>) = 0 [pid 10246] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10245] ioctl(5, LOOP_SET_FD, 3 [pid 10244] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10246] <... open resumed>) = 6 [pid 10246] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10246] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10244] <... futex resumed>) = 0 [pid 10244] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10246] <... futex resumed>) = 0 [pid 10246] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10245] <... ioctl resumed>) = 0 [pid 10244] <... futex resumed>) = 1 [pid 10245] close(3 [pid 10244] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10245] <... close resumed>) = 0 [pid 10245] mkdir("./file1", 0777) = 0 [pid 10245] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10246] <... write resumed>) = 262144 [pid 10246] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10244] <... futex resumed>) = 0 [pid 10246] <... futex resumed>) = 1 [pid 10246] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10245] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10245] ioctl(5, LOOP_CLR_FD) = 0 [pid 10245] close(5) = 0 [pid 10245] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10245] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10244] exit_group(0 [pid 10245] <... futex resumed>) = ? [pid 10246] <... futex resumed>) = ? [pid 10244] <... exit_group resumed>) = ? [pid 10246] +++ exited with 0 +++ [pid 10245] +++ exited with 0 +++ [pid 10244] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10244, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] umount2("./1080", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1080", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1080/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1080/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1080/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1080/bus") = 0 [pid 5052] umount2("./1080/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1080/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1080/binderfs") = 0 [pid 5052] umount2("./1080/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1080/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1080/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1080/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1080/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1080") = 0 [pid 5052] mkdir("./1081", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 259.036164][T10245] loop0: detected capacity change from 0 to 512 [ 259.049954][T10245] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10247 attached , child_tidptr=0x555556d60690) = 10247 [pid 10247] set_robust_list(0x555556d606a0, 24) = 0 [pid 10247] chdir("./1081") = 0 [pid 10247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10247] setpgid(0, 0) = 0 [pid 10247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10247] write(3, "1000", 4) = 4 [pid 10247] close(3) = 0 [pid 10247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10247] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10247] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10247] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10247] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10247] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10248]}, 88) = 10248 [pid 10247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10247] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10247] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10247] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 10248 attached [pid 10248] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10248] set_robust_list(0x7f55300e29a0, 24 [pid 10247] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10248] <... set_robust_list resumed>) = 0 [pid 10247] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10248] memfd_create("syzkaller", 0./strace-static-x86_64: Process 10249 attached ) = 3 [pid 10248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10249] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10248] <... mmap resumed>) = 0x7f5527ca1000 [pid 10247] <... clone3 resumed> => {parent_tid=[10249]}, 88) = 10249 [pid 10249] set_robust_list(0x7f55300c19a0, 24 [pid 10247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10247] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10247] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10249] <... set_robust_list resumed>) = 0 [pid 10249] rt_sigprocmask(SIG_SETMASK, [], [pid 10248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10249] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10249] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10247] <... futex resumed>) = 0 [pid 10249] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10248] <... write resumed>) = 262144 [pid 10247] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10247] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10249] <... futex resumed>) = 0 [pid 10248] munmap(0x7f5527ca1000, 262144 [pid 10249] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10249] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10247] <... futex resumed>) = 0 [pid 10249] <... futex resumed>) = 1 [pid 10249] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10247] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10249] <... open resumed>) = 5 [pid 10247] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10249] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10247] <... futex resumed>) = 0 [pid 10249] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10247] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10247] <... futex resumed>) = 0 [pid 10247] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10249] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10249] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10247] <... futex resumed>) = 0 [pid 10249] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10248] <... munmap resumed>) = 0 [pid 10248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10248] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10248] close(3) = 0 [pid 10248] mkdir("./file1", 0777) = 0 [pid 10248] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10248] ioctl(6, LOOP_CLR_FD) = 0 [pid 10248] close(6) = 0 [pid 10248] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10248] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10247] exit_group(0 [pid 10249] <... futex resumed>) = ? [pid 10247] <... exit_group resumed>) = ? [pid 10249] +++ exited with 0 +++ [pid 10248] <... futex resumed>) = ? [pid 10248] +++ exited with 0 +++ [pid 10247] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10247, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1081", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1081", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1081/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1081/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1081/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1081/bus") = 0 [pid 5052] umount2("./1081/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1081/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1081/binderfs") = 0 [pid 5052] umount2("./1081/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1081/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1081/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1081/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1081/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1081") = 0 [pid 5052] mkdir("./1082", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 259.156879][T10248] loop0: detected capacity change from 0 to 512 [ 259.167308][T10248] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10250 attached , child_tidptr=0x555556d60690) = 10250 [pid 10250] set_robust_list(0x555556d606a0, 24) = 0 [pid 10250] chdir("./1082") = 0 [pid 10250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10250] setpgid(0, 0) = 0 [pid 10250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10250] write(3, "1000", 4) = 4 [pid 10250] close(3) = 0 [pid 10250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10250] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10250] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10250] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10250] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10251 attached [pid 10251] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10250] <... clone3 resumed> => {parent_tid=[10251]}, 88) = 10251 [pid 10251] <... rseq resumed>) = 0 [pid 10251] set_robust_list(0x7f55300e29a0, 24 [pid 10250] rt_sigprocmask(SIG_SETMASK, [], [pid 10251] <... set_robust_list resumed>) = 0 [pid 10250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10250] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10251] memfd_create("syzkaller", 0 [pid 10250] <... futex resumed>) = 0 [pid 10250] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10251] <... memfd_create resumed>) = 3 [pid 10250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10250] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10252]}, 88) = 10252 [pid 10250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 10252 attached [pid 10250] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10252] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10250] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10252] <... rseq resumed>) = 0 [pid 10251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10252] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10252] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10252] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10251] <... write resumed>) = 262144 [pid 10252] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10252] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10250] <... futex resumed>) = 0 [pid 10250] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10252] <... futex resumed>) = 0 [pid 10250] <... futex resumed>) = 1 [pid 10252] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10252] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10250] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10252] <... futex resumed>) = 0 [pid 10250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10252] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10250] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10252] <... open resumed>) = 5 [pid 10250] <... futex resumed>) = 0 [pid 10250] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10252] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10251] munmap(0x7f5527ca1000, 262144 [pid 10250] <... futex resumed>) = 0 [pid 10252] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10251] <... munmap resumed>) = 0 [pid 10250] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10250] <... futex resumed>) = 0 [pid 10250] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10252] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10252] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10250] <... futex resumed>) = 0 [pid 10252] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10251] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10251] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10251] close(3) = 0 [pid 10251] mkdir("./file1", 0777) = 0 [pid 10251] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10251] ioctl(6, LOOP_CLR_FD) = 0 [pid 10251] close(6) = 0 [pid 10251] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10250] exit_group(0) = ? [pid 10252] <... futex resumed>) = ? [pid 10252] +++ exited with 0 +++ [pid 10251] <... futex resumed>) = ? [pid 10251] +++ exited with 0 +++ [pid 10250] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10250, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1082", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1082", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1082/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1082/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1082/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1082/bus") = 0 [pid 5052] umount2("./1082/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1082/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1082/binderfs") = 0 [pid 5052] umount2("./1082/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1082/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1082/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1082/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1082/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1082") = 0 [pid 5052] mkdir("./1083", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10253 attached , child_tidptr=0x555556d60690) = 10253 [pid 10253] set_robust_list(0x555556d606a0, 24) = 0 [pid 10253] chdir("./1083") = 0 [pid 10253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10253] setpgid(0, 0) = 0 [pid 10253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10253] write(3, "1000", 4) = 4 [pid 10253] close(3) = 0 [pid 10253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10253] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10253] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10253] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10253] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10253] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10254]}, 88) = 10254 ./strace-static-x86_64: Process 10254 attached [pid 10254] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10253] rt_sigprocmask(SIG_SETMASK, [], [pid 10254] <... rseq resumed>) = 0 [pid 10253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10254] set_robust_list(0x7f55300e29a0, 24 [pid 10253] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10254] <... set_robust_list resumed>) = 0 [pid 10254] rt_sigprocmask(SIG_SETMASK, [], [pid 10253] <... futex resumed>) = 0 [pid 10254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10253] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10254] memfd_create("syzkaller", 0 [pid 10253] <... futex resumed>) = 0 [pid 10253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10254] <... memfd_create resumed>) = 3 [pid 10253] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10253] <... mprotect resumed>) = 0 [pid 10254] <... mmap resumed>) = 0x7f5527ca1000 [pid 10253] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10255]}, 88) = 10255 [pid 10253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10253] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10253] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10255 attached [pid 10255] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10255] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 259.260913][T10251] loop0: detected capacity change from 0 to 512 [ 259.271473][T10251] ext4: Unknown parameter 'nouser_xattr' [pid 10255] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10255] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10255] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10253] <... futex resumed>) = 0 [pid 10253] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10255] <... futex resumed>) = 0 [pid 10253] <... futex resumed>) = 1 [pid 10255] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10253] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10255] <... mount resumed>) = 0 [pid 10255] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10253] <... futex resumed>) = 0 [pid 10253] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10253] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10255] <... futex resumed>) = 1 [pid 10255] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10254] <... write resumed>) = 262144 [pid 10255] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10253] <... futex resumed>) = 0 [pid 10253] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10253] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10255] <... futex resumed>) = 1 [pid 10255] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10255] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10254] munmap(0x7f5527ca1000, 262144 [pid 10255] <... futex resumed>) = 1 [pid 10254] <... munmap resumed>) = 0 [pid 10253] <... futex resumed>) = 0 [pid 10255] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10254] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10254] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10254] close(3) = 0 [pid 10254] mkdir("./file1", 0777) = 0 [pid 10254] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10254] ioctl(6, LOOP_CLR_FD) = 0 [pid 10254] close(6) = 0 [pid 10254] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10253] exit_group(0 [pid 10255] <... futex resumed>) = ? [pid 10253] <... exit_group resumed>) = ? [pid 10255] +++ exited with 0 +++ [pid 10254] <... futex resumed>) = ? [pid 10254] +++ exited with 0 +++ [pid 10253] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10253, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1083", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1083", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1083/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1083/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1083/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1083/bus") = 0 [pid 5052] umount2("./1083/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1083/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1083/binderfs") = 0 [pid 5052] umount2("./1083/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1083/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1083/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1083/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1083/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1083") = 0 [pid 5052] mkdir("./1084", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10256 attached , child_tidptr=0x555556d60690) = 10256 [pid 10256] set_robust_list(0x555556d606a0, 24) = 0 [pid 10256] chdir("./1084") = 0 [pid 10256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10256] setpgid(0, 0) = 0 [pid 10256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10256] write(3, "1000", 4) = 4 [pid 10256] close(3) = 0 [pid 10256] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10256] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10256] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10256] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10256] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10256] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10257 attached [pid 10257] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10256] <... clone3 resumed> => {parent_tid=[10257]}, 88) = 10257 [pid 10257] set_robust_list(0x7f55300e29a0, 24 [pid 10256] rt_sigprocmask(SIG_SETMASK, [], [pid 10257] <... set_robust_list resumed>) = 0 [pid 10256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10257] rt_sigprocmask(SIG_SETMASK, [], [pid 10256] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10257] memfd_create("syzkaller", 0 [pid 10256] <... futex resumed>) = 0 [pid 10256] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10257] <... memfd_create resumed>) = 3 [pid 10256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10256] <... mmap resumed>) = 0x7f55300a1000 [pid 10257] <... mmap resumed>) = 0x7f5527ca1000 [pid 10256] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10256] <... mprotect resumed>) = 0 [pid 10256] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10258]}, 88) = 10258 [pid 10256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10256] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10256] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10258 attached [pid 10258] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [ 259.334272][T10254] loop0: detected capacity change from 0 to 512 [ 259.344888][T10254] ext4: Unknown parameter 'nouser_xattr' [pid 10258] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10258] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10257] <... write resumed>) = 262144 [pid 10258] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10258] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10256] <... futex resumed>) = 0 [pid 10256] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10258] <... futex resumed>) = 0 [pid 10256] <... futex resumed>) = 1 [pid 10258] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10256] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10258] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10256] <... futex resumed>) = 0 [pid 10256] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10256] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10258] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10258] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10257] munmap(0x7f5527ca1000, 262144 [pid 10258] <... futex resumed>) = 1 [pid 10257] <... munmap resumed>) = 0 [pid 10256] <... futex resumed>) = 0 [pid 10258] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10256] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10258] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10256] <... futex resumed>) = 0 [pid 10258] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10256] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10258] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10258] <... futex resumed>) = 0 [pid 10258] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10257] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10257] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10257] close(3) = 0 [pid 10257] mkdir("./file1", 0777) = 0 [pid 10257] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10257] ioctl(6, LOOP_CLR_FD) = 0 [pid 10257] close(6) = 0 [pid 10257] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10256] exit_group(0) = ? [pid 10258] <... futex resumed>) = ? [pid 10258] +++ exited with 0 +++ [pid 10257] <... futex resumed>) = ? [pid 10257] +++ exited with 0 +++ [pid 10256] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10256, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1084", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1084", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1084/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1084/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1084/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1084/bus") = 0 [pid 5052] umount2("./1084/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1084/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1084/binderfs") = 0 [pid 5052] umount2("./1084/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1084/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1084/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1084/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1084/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1084") = 0 [pid 5052] mkdir("./1085", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10259 ./strace-static-x86_64: Process 10259 attached [pid 10259] set_robust_list(0x555556d606a0, 24) = 0 [pid 10259] chdir("./1085") = 0 [pid 10259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10259] setpgid(0, 0) = 0 [ 259.408596][T10257] loop0: detected capacity change from 0 to 512 [ 259.419254][T10257] ext4: Unknown parameter 'nouser_xattr' [pid 10259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10259] write(3, "1000", 4) = 4 [pid 10259] close(3) = 0 [pid 10259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10259] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10259] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10259] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10259] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10260 attached => {parent_tid=[10260]}, 88) = 10260 [pid 10259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10259] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10260] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10259] <... futex resumed>) = 0 [pid 10259] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10260] <... rseq resumed>) = 0 [pid 10259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10260] set_robust_list(0x7f55300e29a0, 24 [pid 10259] <... mmap resumed>) = 0x7f55300a1000 [pid 10259] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10260] <... set_robust_list resumed>) = 0 [pid 10259] <... mprotect resumed>) = 0 [pid 10260] rt_sigprocmask(SIG_SETMASK, [], [pid 10259] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10259] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10260] memfd_create("syzkaller", 0./strace-static-x86_64: Process 10261 attached [pid 10261] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10260] <... memfd_create resumed>) = 3 [pid 10259] <... clone3 resumed> => {parent_tid=[10261]}, 88) = 10261 [pid 10261] set_robust_list(0x7f55300c19a0, 24 [pid 10260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10259] rt_sigprocmask(SIG_SETMASK, [], [pid 10261] <... set_robust_list resumed>) = 0 [pid 10261] rt_sigprocmask(SIG_SETMASK, [], [pid 10259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10260] <... mmap resumed>) = 0x7f5527ca1000 [pid 10259] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10261] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10259] <... futex resumed>) = 0 [pid 10261] <... open resumed>) = 4 [pid 10259] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10261] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10259] <... futex resumed>) = 0 [pid 10261] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10259] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10259] <... futex resumed>) = 0 [pid 10261] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10260] <... write resumed>) = 262144 [pid 10259] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10260] munmap(0x7f5527ca1000, 262144 [pid 10261] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10259] <... futex resumed>) = 0 [pid 10261] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10259] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10259] <... futex resumed>) = 0 [pid 10261] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10259] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10261] <... open resumed>) = 5 [pid 10260] <... munmap resumed>) = 0 [pid 10260] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10261] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10259] <... futex resumed>) = 0 [pid 10260] <... openat resumed>) = 6 [pid 10259] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10261] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10259] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10261] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10260] ioctl(6, LOOP_SET_FD, 3 [pid 10261] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10259] <... futex resumed>) = 0 [pid 10261] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10260] <... ioctl resumed>) = 0 [pid 10260] close(3) = 0 [pid 10260] mkdir("./file1", 0777) = 0 [pid 10260] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10260] ioctl(6, LOOP_CLR_FD) = 0 [pid 10260] close(6) = 0 [pid 10260] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10259] exit_group(0 [pid 10261] <... futex resumed>) = ? [pid 10259] <... exit_group resumed>) = ? [pid 10260] +++ exited with 0 +++ [pid 10261] +++ exited with 0 +++ [pid 10259] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10259, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1085", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1085", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1085/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1085/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1085/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1085/bus") = 0 [pid 5052] umount2("./1085/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1085/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1085/binderfs") = 0 [pid 5052] umount2("./1085/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1085/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1085/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1085/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1085/file1") = 0 [ 259.510212][T10260] loop0: detected capacity change from 0 to 512 [ 259.522653][T10260] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1085") = 0 [pid 5052] mkdir("./1086", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10262 attached , child_tidptr=0x555556d60690) = 10262 [pid 10262] set_robust_list(0x555556d606a0, 24) = 0 [pid 10262] chdir("./1086") = 0 [pid 10262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10262] setpgid(0, 0) = 0 [pid 10262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10262] write(3, "1000", 4) = 4 [pid 10262] close(3) = 0 [pid 10262] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10262] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10262] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10262] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10262] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10262] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10262] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10263]}, 88) = 10263 [pid 10262] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10262] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10262] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10262] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10262] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 10263 attached [pid 10263] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10262] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10263] <... rseq resumed>) = 0 [pid 10263] set_robust_list(0x7f55300e29a0, 24 [pid 10262] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10263] <... set_robust_list resumed>) = 0 [pid 10263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10262] <... clone3 resumed> => {parent_tid=[10264]}, 88) = 10264 ./strace-static-x86_64: Process 10264 attached [pid 10263] memfd_create("syzkaller", 0) = 3 [pid 10262] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10262] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10263] <... mmap resumed>) = 0x7f5527ca1000 [pid 10262] <... futex resumed>) = 0 [pid 10262] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10264] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10264] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10264] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10263] <... write resumed>) = 262144 [pid 10264] <... open resumed>) = 4 [pid 10264] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10263] munmap(0x7f5527ca1000, 262144 [pid 10264] <... futex resumed>) = 1 [pid 10262] <... futex resumed>) = 0 [pid 10264] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10262] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10263] <... munmap resumed>) = 0 [pid 10262] <... futex resumed>) = 0 [pid 10262] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10263] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10264] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10263] <... openat resumed>) = 5 [pid 10263] ioctl(5, LOOP_SET_FD, 3 [pid 10264] <... mount resumed>) = 0 [pid 10264] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10262] <... futex resumed>) = 0 [pid 10264] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10262] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10262] <... futex resumed>) = 0 [pid 10264] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10262] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10264] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10264] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10262] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10262] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10264] <... futex resumed>) = 0 [pid 10264] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10262] <... futex resumed>) = 1 [pid 10263] <... ioctl resumed>) = 0 [pid 10262] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10263] close(3) = 0 [pid 10263] mkdir("./file1", 0777) = 0 [pid 10263] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10263] ioctl(5, LOOP_CLR_FD) = 0 [pid 10263] close(5 [pid 10264] <... write resumed>) = 262144 [pid 10264] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10263] <... close resumed>) = 0 [pid 10264] <... futex resumed>) = 1 [pid 10263] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10262] <... futex resumed>) = 0 [pid 10264] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10263] <... futex resumed>) = 0 [pid 10262] exit_group(0 [pid 10263] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10264] <... futex resumed>) = ? [pid 10263] <... futex resumed>) = ? [pid 10262] <... exit_group resumed>) = ? [pid 10264] +++ exited with 0 +++ [pid 10263] +++ exited with 0 +++ [pid 10262] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10262, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 259.635339][T10263] loop0: detected capacity change from 0 to 512 [ 259.648262][T10263] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1086", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1086", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1086/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1086/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1086/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1086/bus") = 0 [pid 5052] umount2("./1086/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1086/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1086/binderfs") = 0 [pid 5052] umount2("./1086/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1086/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1086/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1086/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1086/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1086") = 0 [pid 5052] mkdir("./1087", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10265 attached , child_tidptr=0x555556d60690) = 10265 [pid 10265] set_robust_list(0x555556d606a0, 24) = 0 [pid 10265] chdir("./1087") = 0 [pid 10265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10265] setpgid(0, 0) = 0 [pid 10265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10265] write(3, "1000", 4) = 4 [pid 10265] close(3) = 0 [pid 10265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10265] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10265] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10265] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10265] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10266 attached [pid 10266] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10265] <... clone3 resumed> => {parent_tid=[10266]}, 88) = 10266 [pid 10266] <... rseq resumed>) = 0 [pid 10265] rt_sigprocmask(SIG_SETMASK, [], [pid 10266] set_robust_list(0x7f55300e29a0, 24 [pid 10265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10266] <... set_robust_list resumed>) = 0 [pid 10265] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10266] rt_sigprocmask(SIG_SETMASK, [], [pid 10265] <... futex resumed>) = 0 [pid 10266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10266] memfd_create("syzkaller", 0 [pid 10265] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10266] <... memfd_create resumed>) = 3 [pid 10265] <... mmap resumed>) = 0x7f55300a1000 [pid 10266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10265] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10265] <... mprotect resumed>) = 0 [pid 10265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10267]}, 88) = 10267 ./strace-static-x86_64: Process 10267 attached [pid 10267] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10265] rt_sigprocmask(SIG_SETMASK, [], [pid 10267] set_robust_list(0x7f55300c19a0, 24 [pid 10265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10267] <... set_robust_list resumed>) = 0 [pid 10265] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10267] rt_sigprocmask(SIG_SETMASK, [], [pid 10265] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10267] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10267] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10266] <... write resumed>) = 262144 [pid 10267] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10266] munmap(0x7f5527ca1000, 262144 [pid 10265] <... futex resumed>) = 0 [pid 10266] <... munmap resumed>) = 0 [pid 10265] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10265] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10266] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10267] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10266] <... openat resumed>) = 5 [pid 10266] ioctl(5, LOOP_SET_FD, 3 [pid 10267] <... mount resumed>) = 0 [pid 10267] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10267] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10265] <... futex resumed>) = 0 [pid 10265] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10267] <... futex resumed>) = 0 [pid 10267] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10265] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10267] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10265] <... futex resumed>) = 0 [pid 10265] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10267] <... futex resumed>) = 1 [pid 10267] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10265] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10266] <... ioctl resumed>) = 0 [pid 10266] close(3) = 0 [pid 10266] mkdir("./file1", 0777) = 0 [pid 10266] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10267] <... write resumed>) = 262144 [pid 10266] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10267] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10265] <... futex resumed>) = 0 [pid 10267] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10266] ioctl(5, LOOP_CLR_FD) = 0 [pid 10266] close(5) = 0 [pid 10266] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10266] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10265] exit_group(0 [pid 10267] <... futex resumed>) = ? [pid 10266] <... futex resumed>) = ? [pid 10267] +++ exited with 0 +++ [pid 10266] +++ exited with 0 +++ [pid 10265] <... exit_group resumed>) = ? [pid 10265] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10265, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1087", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1087", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1087/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1087/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1087/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1087/bus") = 0 [pid 5052] umount2("./1087/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1087/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1087/binderfs") = 0 [pid 5052] umount2("./1087/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1087/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1087/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1087/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1087/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1087") = 0 [pid 5052] mkdir("./1088", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10268 attached , child_tidptr=0x555556d60690) = 10268 [pid 10268] set_robust_list(0x555556d606a0, 24) = 0 [ 259.760862][T10266] loop0: detected capacity change from 0 to 512 [ 259.771760][T10266] ext4: Unknown parameter 'nouser_xattr' [pid 10268] chdir("./1088") = 0 [pid 10268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10268] setpgid(0, 0) = 0 [pid 10268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10268] write(3, "1000", 4) = 4 [pid 10268] close(3) = 0 [pid 10268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10268] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10268] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10268] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10268] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10268] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10268] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10269 attached [pid 10269] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10269] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10268] <... clone3 resumed> => {parent_tid=[10269]}, 88) = 10269 [pid 10269] rt_sigprocmask(SIG_SETMASK, [], [pid 10268] rt_sigprocmask(SIG_SETMASK, [], [pid 10269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10269] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10268] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10269] <... futex resumed>) = 0 [pid 10269] memfd_create("syzkaller", 0) = 3 [pid 10268] <... futex resumed>) = 1 [pid 10269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10268] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10269] <... mmap resumed>) = 0x7f5527cc2000 [pid 10268] <... futex resumed>) = 0 [pid 10268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5527ca1000 [pid 10268] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10268] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10268] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10270 attached [pid 10270] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10268] <... clone3 resumed> => {parent_tid=[10270]}, 88) = 10270 [pid 10270] <... rseq resumed>) = 0 [pid 10268] rt_sigprocmask(SIG_SETMASK, [], [pid 10270] set_robust_list(0x7f5527cc19a0, 24) = 0 [pid 10268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10270] rt_sigprocmask(SIG_SETMASK, [], [pid 10269] <... write resumed>) = 262144 [pid 10268] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10268] <... futex resumed>) = 0 [pid 10270] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10268] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10269] munmap(0x7f5527cc2000, 262144 [pid 10270] <... open resumed>) = 4 [pid 10270] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10268] <... futex resumed>) = 0 [pid 10270] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10269] <... munmap resumed>) = 0 [pid 10268] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10268] <... futex resumed>) = 0 [pid 10270] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10269] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10268] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10269] <... openat resumed>) = 5 [pid 10269] ioctl(5, LOOP_SET_FD, 3 [pid 10270] <... mount resumed>) = 0 [pid 10270] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10268] <... futex resumed>) = 0 [pid 10270] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10268] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10270] <... open resumed>) = 6 [pid 10268] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10270] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10268] <... futex resumed>) = 0 [pid 10270] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10268] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10268] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10269] <... ioctl resumed>) = 0 [pid 10269] close(3) = 0 [pid 10269] mkdir("./file1", 0777) = 0 [pid 10269] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10270] <... write resumed>) = 262144 [pid 10270] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10270] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10268] <... futex resumed>) = 0 [pid 10269] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10269] ioctl(5, LOOP_CLR_FD) = 0 [pid 10269] close(5) = 0 [pid 10269] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10268] exit_group(0 [pid 10269] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 10268] <... exit_group resumed>) = ? [pid 10270] <... futex resumed>) = ? [pid 10269] +++ exited with 0 +++ [pid 10270] +++ exited with 0 +++ [pid 10268] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10268, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1088", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1088", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1088/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1088/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1088/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1088/bus") = 0 [pid 5052] umount2("./1088/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1088/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1088/binderfs") = 0 [pid 5052] umount2("./1088/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1088/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1088/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1088/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 259.857546][T10269] loop0: detected capacity change from 0 to 512 [ 259.872533][T10269] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1088/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1088") = 0 [pid 5052] mkdir("./1089", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10271 attached , child_tidptr=0x555556d60690) = 10271 [pid 10271] set_robust_list(0x555556d606a0, 24) = 0 [pid 10271] chdir("./1089") = 0 [pid 10271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10271] setpgid(0, 0) = 0 [pid 10271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10271] write(3, "1000", 4) = 4 [pid 10271] close(3) = 0 [pid 10271] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10271] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10271] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10271] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10271] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10271] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10272]}, 88) = 10272 [pid 10271] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10272 attached NULL, 8) = 0 [pid 10272] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10271] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10272] <... rseq resumed>) = 0 [pid 10272] set_robust_list(0x7f55300e29a0, 24 [pid 10271] <... futex resumed>) = 0 [pid 10271] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10271] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10271] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10273 attached [pid 10273] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10271] <... clone3 resumed> => {parent_tid=[10273]}, 88) = 10273 [pid 10273] set_robust_list(0x7f55300c19a0, 24 [pid 10271] rt_sigprocmask(SIG_SETMASK, [], [pid 10273] <... set_robust_list resumed>) = 0 [pid 10271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10273] rt_sigprocmask(SIG_SETMASK, [], [pid 10271] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10273] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10271] <... futex resumed>) = 0 [pid 10273] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10271] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10272] <... set_robust_list resumed>) = 0 [pid 10273] <... open resumed>) = 3 [pid 10272] rt_sigprocmask(SIG_SETMASK, [], [pid 10273] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10273] <... futex resumed>) = 1 [pid 10273] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10272] memfd_create("syzkaller", 0 [pid 10271] <... futex resumed>) = 0 [pid 10271] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10273] <... futex resumed>) = 0 [pid 10271] <... futex resumed>) = 1 [pid 10273] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10272] <... memfd_create resumed>) = 4 [pid 10271] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10273] <... mount resumed>) = 0 [pid 10273] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10273] <... futex resumed>) = 1 [pid 10271] <... futex resumed>) = 0 [pid 10273] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10271] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10271] <... futex resumed>) = 0 [pid 10273] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10271] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10272] <... mmap resumed>) = 0x7f5527ca1000 [pid 10273] <... open resumed>) = 5 [pid 10273] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10271] <... futex resumed>) = 0 [pid 10273] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10271] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10273] <... futex resumed>) = 0 [pid 10271] <... futex resumed>) = 1 [pid 10271] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10273] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10273] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10271] <... futex resumed>) = 0 [pid 10272] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10273] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10272] <... write resumed>) = 262144 [pid 10272] munmap(0x7f5527ca1000, 262144) = 0 [pid 10272] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10272] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10272] close(4) = 0 [pid 10272] mkdir("./file1", 0777) = 0 [pid 10272] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10272] ioctl(6, LOOP_CLR_FD) = 0 [pid 10272] close(6) = 0 [pid 10272] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10271] exit_group(0 [pid 10273] <... futex resumed>) = ? [pid 10271] <... exit_group resumed>) = ? [pid 10273] +++ exited with 0 +++ [pid 10272] +++ exited with 0 +++ [pid 10271] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10271, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1089", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1089", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1089/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1089/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1089/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1089/bus") = 0 [pid 5052] umount2("./1089/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1089/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1089/binderfs") = 0 [pid 5052] umount2("./1089/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1089/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1089/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1089/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1089/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1089") = 0 [pid 5052] mkdir("./1090", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 259.977523][T10272] loop0: detected capacity change from 0 to 512 [ 259.987370][T10272] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10274 attached , child_tidptr=0x555556d60690) = 10274 [pid 10274] set_robust_list(0x555556d606a0, 24) = 0 [pid 10274] chdir("./1090") = 0 [pid 10274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10274] setpgid(0, 0) = 0 [pid 10274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10274] write(3, "1000", 4) = 4 [pid 10274] close(3) = 0 [pid 10274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10274] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10274] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10274] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10274] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10274] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10275 attached => {parent_tid=[10275]}, 88) = 10275 [pid 10275] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10274] rt_sigprocmask(SIG_SETMASK, [], [pid 10275] <... rseq resumed>) = 0 [pid 10275] set_robust_list(0x7f55300e29a0, 24 [pid 10274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10275] <... set_robust_list resumed>) = 0 [pid 10274] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10274] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10275] rt_sigprocmask(SIG_SETMASK, [], [pid 10274] <... futex resumed>) = 0 [pid 10275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10275] memfd_create("syzkaller", 0 [pid 10274] <... mmap resumed>) = 0x7f55300a1000 [pid 10275] <... memfd_create resumed>) = 3 [pid 10274] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10274] <... mprotect resumed>) = 0 [pid 10274] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10276 attached [pid 10275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10276] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10274] <... clone3 resumed> => {parent_tid=[10276]}, 88) = 10276 [pid 10276] <... rseq resumed>) = 0 [pid 10274] rt_sigprocmask(SIG_SETMASK, [], [pid 10276] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10276] rt_sigprocmask(SIG_SETMASK, [], [pid 10274] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10276] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10275] <... write resumed>) = 262144 [pid 10274] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10275] munmap(0x7f5527ca1000, 262144 [pid 10276] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10276] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10275] <... munmap resumed>) = 0 [pid 10274] <... futex resumed>) = 0 [pid 10275] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10274] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10276] <... futex resumed>) = 0 [pid 10274] <... futex resumed>) = 1 [pid 10276] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10274] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10276] <... mount resumed>) = 0 [pid 10275] <... openat resumed>) = 5 [pid 10276] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10275] ioctl(5, LOOP_SET_FD, 3 [pid 10274] <... futex resumed>) = 0 [pid 10274] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10274] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10276] <... futex resumed>) = 1 [pid 10276] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10276] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10274] <... futex resumed>) = 0 [pid 10274] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10276] <... futex resumed>) = 1 [pid 10274] <... futex resumed>) = 0 [pid 10276] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10274] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10275] <... ioctl resumed>) = 0 [pid 10275] close(3) = 0 [pid 10275] mkdir("./file1", 0777 [pid 10276] <... write resumed>) = 262144 [pid 10276] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10274] <... futex resumed>) = 0 [pid 10275] <... mkdir resumed>) = 0 [pid 10276] <... futex resumed>) = 1 [pid 10276] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10275] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10275] ioctl(5, LOOP_CLR_FD) = 0 [pid 10275] close(5) = 0 [pid 10275] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10275] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10274] exit_group(0 [pid 10275] <... futex resumed>) = ? [pid 10274] <... exit_group resumed>) = ? [pid 10276] <... futex resumed>) = ? [pid 10275] +++ exited with 0 +++ [pid 10276] +++ exited with 0 +++ [pid 10274] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10274, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1090", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1090", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1090/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1090/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1090/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1090/bus") = 0 [pid 5052] umount2("./1090/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1090/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1090/binderfs") = 0 [pid 5052] umount2("./1090/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1090/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1090/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1090/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1090/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1090") = 0 [pid 5052] mkdir("./1091", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 260.081785][T10275] loop0: detected capacity change from 0 to 512 [ 260.097501][T10275] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10277 ./strace-static-x86_64: Process 10277 attached [pid 10277] set_robust_list(0x555556d606a0, 24) = 0 [pid 10277] chdir("./1091") = 0 [pid 10277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10277] setpgid(0, 0) = 0 [pid 10277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10277] write(3, "1000", 4) = 4 [pid 10277] close(3) = 0 [pid 10277] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10277] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10277] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10277] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10277] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10277] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10278]}, 88) = 10278 ./strace-static-x86_64: Process 10278 attached [pid 10277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10277] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10277] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10277] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10277] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10279 attached [pid 10278] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10279] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10278] set_robust_list(0x7f55300e29a0, 24 [pid 10277] <... clone3 resumed> => {parent_tid=[10279]}, 88) = 10279 [pid 10279] <... rseq resumed>) = 0 [pid 10278] <... set_robust_list resumed>) = 0 [pid 10277] rt_sigprocmask(SIG_SETMASK, [], [pid 10279] set_robust_list(0x7f55300c19a0, 24 [pid 10278] rt_sigprocmask(SIG_SETMASK, [], [pid 10277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10279] <... set_robust_list resumed>) = 0 [pid 10278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10277] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10279] rt_sigprocmask(SIG_SETMASK, [], [pid 10277] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10278] memfd_create("syzkaller", 0 [pid 10279] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10278] <... memfd_create resumed>) = 3 [pid 10278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10279] <... open resumed>) = 4 [pid 10278] <... mmap resumed>) = 0x7f5527ca1000 [pid 10279] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10277] <... futex resumed>) = 0 [pid 10279] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10277] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10279] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10279] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10279] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10277] <... futex resumed>) = 1 [pid 10279] <... futex resumed>) = 0 [pid 10277] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10279] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10278] <... write resumed>) = 262144 [pid 10277] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10279] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10278] munmap(0x7f5527ca1000, 262144 [pid 10277] <... futex resumed>) = 0 [pid 10279] <... open resumed>) = 5 [pid 10279] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10278] <... munmap resumed>) = 0 [pid 10277] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10278] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10277] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10279] <... futex resumed>) = 0 [pid 10279] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10278] <... openat resumed>) = 6 [pid 10278] ioctl(6, LOOP_SET_FD, 3 [pid 10277] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10279] <... futex resumed>) = 0 [pid 10277] <... futex resumed>) = 1 [pid 10277] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10279] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10278] <... ioctl resumed>) = 0 [pid 10278] close(3) = 0 [pid 10278] mkdir("./file1", 0777) = 0 [pid 10278] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10279] <... write resumed>) = 262144 [pid 10279] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10279] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10277] <... futex resumed>) = 0 [pid 10278] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10278] ioctl(6, LOOP_CLR_FD) = 0 [pid 10278] close(6) = 0 [pid 10278] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10278] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10277] exit_group(0 [pid 10278] <... futex resumed>) = ? [pid 10279] <... futex resumed>) = ? [pid 10278] +++ exited with 0 +++ [pid 10277] <... exit_group resumed>) = ? [pid 10279] +++ exited with 0 +++ [pid 10277] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10277, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1091", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1091", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1091/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1091/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1091/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1091/bus") = 0 [pid 5052] umount2("./1091/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1091/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1091/binderfs") = 0 [pid 5052] umount2("./1091/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1091/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1091/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1091/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [ 260.182101][T10278] loop0: detected capacity change from 0 to 512 [ 260.196213][T10278] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(4) = 0 [pid 5052] rmdir("./1091/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1091") = 0 [pid 5052] mkdir("./1092", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10280 attached , child_tidptr=0x555556d60690) = 10280 [pid 10280] set_robust_list(0x555556d606a0, 24) = 0 [pid 10280] chdir("./1092") = 0 [pid 10280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10280] setpgid(0, 0) = 0 [pid 10280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10280] write(3, "1000", 4) = 4 [pid 10280] close(3) = 0 [pid 10280] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10280] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10280] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10280] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10280] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10280] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10280] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10281 attached [pid 10281] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10280] <... clone3 resumed> => {parent_tid=[10281]}, 88) = 10281 [pid 10281] <... rseq resumed>) = 0 [pid 10280] rt_sigprocmask(SIG_SETMASK, [], [pid 10281] set_robust_list(0x7f55300e29a0, 24 [pid 10280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10281] <... set_robust_list resumed>) = 0 [pid 10280] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10281] rt_sigprocmask(SIG_SETMASK, [], [pid 10280] <... futex resumed>) = 0 [pid 10281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10280] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10281] memfd_create("syzkaller", 0 [pid 10280] <... futex resumed>) = 0 [pid 10280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10281] <... memfd_create resumed>) = 3 [pid 10280] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10280] <... mprotect resumed>) = 0 [pid 10281] <... mmap resumed>) = 0x7f5527ca1000 [pid 10280] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10280] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10280] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10282]}, 88) = 10282 [pid 10280] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10280] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10280] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10282 attached [pid 10282] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10282] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10282] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10281] <... write resumed>) = 262144 [pid 10281] munmap(0x7f5527ca1000, 262144 [pid 10282] <... open resumed>) = 4 [pid 10281] <... munmap resumed>) = 0 [pid 10281] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10282] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10281] <... openat resumed>) = 5 [pid 10281] ioctl(5, LOOP_SET_FD, 3 [pid 10282] <... futex resumed>) = 1 [pid 10280] <... futex resumed>) = 0 [pid 10282] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10280] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10282] <... futex resumed>) = 0 [pid 10282] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10280] <... futex resumed>) = 1 [pid 10280] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10282] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10282] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10280] <... futex resumed>) = 0 [pid 10280] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10282] <... futex resumed>) = 0 [pid 10280] <... futex resumed>) = 1 [pid 10282] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10280] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10282] <... open resumed>) = 6 [pid 10281] <... ioctl resumed>) = 0 [pid 10281] close(3) = 0 [pid 10281] mkdir("./file1", 0777 [pid 10282] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10281] <... mkdir resumed>) = 0 [pid 10282] <... futex resumed>) = 1 [pid 10281] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10280] <... futex resumed>) = 0 [pid 10282] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10280] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10282] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10280] <... futex resumed>) = 0 [pid 10282] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10280] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10281] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10281] ioctl(5, LOOP_CLR_FD) = 0 [pid 10281] close(5) = 0 [pid 10281] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10281] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10282] <... write resumed>) = 262144 [pid 10282] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10280] <... futex resumed>) = 0 [pid 10282] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10280] exit_group(0 [pid 10281] <... futex resumed>) = ? [pid 10280] <... exit_group resumed>) = ? [pid 10282] <... futex resumed>) = ? [pid 10282] +++ exited with 0 +++ [pid 10281] +++ exited with 0 +++ [pid 10280] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10280, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1092", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1092", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1092/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1092/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1092/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1092/bus") = 0 [pid 5052] umount2("./1092/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1092/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1092/binderfs") = 0 [pid 5052] umount2("./1092/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1092/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1092/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1092/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1092/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1092") = 0 [pid 5052] mkdir("./1093", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10283 ./strace-static-x86_64: Process 10283 attached [pid 10283] set_robust_list(0x555556d606a0, 24) = 0 [pid 10283] chdir("./1093") = 0 [pid 10283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10283] setpgid(0, 0) = 0 [ 260.282358][T10281] loop0: detected capacity change from 0 to 512 [ 260.293587][T10281] ext4: Unknown parameter 'nouser_xattr' [pid 10283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10283] write(3, "1000", 4) = 4 [pid 10283] close(3) = 0 [pid 10283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10283] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10283] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10283] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10283] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10284 attached => {parent_tid=[10284]}, 88) = 10284 [pid 10284] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10283] rt_sigprocmask(SIG_SETMASK, [], [pid 10284] set_robust_list(0x7f55300e29a0, 24 [pid 10283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10284] <... set_robust_list resumed>) = 0 [pid 10283] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10284] rt_sigprocmask(SIG_SETMASK, [], [pid 10283] <... futex resumed>) = 0 [pid 10284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10283] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10284] memfd_create("syzkaller", 0 [pid 10283] <... futex resumed>) = 0 [pid 10283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10284] <... memfd_create resumed>) = 3 [pid 10283] <... mmap resumed>) = 0x7f55300a1000 [pid 10283] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10283] <... mprotect resumed>) = 0 [pid 10283] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10283] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10285]}, 88) = 10285 [pid 10283] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10283] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10283] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10285 attached [pid 10285] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10284] <... write resumed>) = 262144 [pid 10285] <... rseq resumed>) = 0 [pid 10284] munmap(0x7f5527ca1000, 262144 [pid 10285] set_robust_list(0x7f55300c19a0, 24 [pid 10284] <... munmap resumed>) = 0 [pid 10284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10284] ioctl(4, LOOP_SET_FD, 3 [pid 10285] <... set_robust_list resumed>) = 0 [pid 10285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10285] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10284] <... ioctl resumed>) = 0 [pid 10284] close(3) = 0 [pid 10284] mkdir("./file1", 0777 [pid 10285] <... open resumed>) = 5 [pid 10285] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10285] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10283] <... futex resumed>) = 0 [pid 10283] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10285] <... futex resumed>) = 0 [pid 10283] <... futex resumed>) = 1 [pid 10285] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10283] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10285] <... mount resumed>) = 0 [pid 10285] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10283] <... futex resumed>) = 0 [pid 10285] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10283] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10283] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10284] <... mkdir resumed>) = 0 [pid 10284] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10285] <... futex resumed>) = 0 [pid 10285] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10285] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10283] <... futex resumed>) = 0 [pid 10283] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10283] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10284] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10284] ioctl(4, LOOP_CLR_FD) = 0 [pid 10284] close(4) = 0 [pid 10284] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10284] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 10285] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10283] <... futex resumed>) = 0 [pid 10283] exit_group(0) = ? [pid 10284] <... futex resumed>) = ? [pid 10284] +++ exited with 0 +++ [pid 10285] <... futex resumed>) = ? [pid 10285] +++ exited with 0 +++ [pid 10283] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10283, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1093", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1093", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1093/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1093/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1093/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1093/bus") = 0 [ 260.373465][T10284] loop0: detected capacity change from 0 to 512 [ 260.387489][T10284] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1093/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1093/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1093/binderfs") = 0 [pid 5052] umount2("./1093/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1093/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1093/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1093/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1093/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1093") = 0 [pid 5052] mkdir("./1094", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10286 attached , child_tidptr=0x555556d60690) = 10286 [pid 10286] set_robust_list(0x555556d606a0, 24) = 0 [pid 10286] chdir("./1094") = 0 [pid 10286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10286] setpgid(0, 0) = 0 [pid 10286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10286] write(3, "1000", 4) = 4 [pid 10286] close(3) = 0 [pid 10286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10286] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10286] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10286] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10286] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10286] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10286] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10287 attached [pid 10287] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10286] <... clone3 resumed> => {parent_tid=[10287]}, 88) = 10287 [pid 10287] set_robust_list(0x7f55300e29a0, 24 [pid 10286] rt_sigprocmask(SIG_SETMASK, [], [pid 10287] <... set_robust_list resumed>) = 0 [pid 10286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10287] rt_sigprocmask(SIG_SETMASK, [], [pid 10286] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10286] <... futex resumed>) = 0 [pid 10287] memfd_create("syzkaller", 0 [pid 10286] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10287] <... memfd_create resumed>) = 3 [pid 10286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10286] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10286] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10287] <... mmap resumed>) = 0x7f5527ca1000 [pid 10286] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10286] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10288 attached [pid 10287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10286] <... clone3 resumed> => {parent_tid=[10288]}, 88) = 10288 [pid 10288] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10288] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10288] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10288] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10286] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10288] <... futex resumed>) = 0 [pid 10286] <... futex resumed>) = 1 [pid 10286] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10288] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10288] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10287] <... write resumed>) = 262144 [pid 10286] <... futex resumed>) = 0 [pid 10286] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10286] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10288] <... futex resumed>) = 1 [pid 10287] munmap(0x7f5527ca1000, 262144 [pid 10288] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10288] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10286] <... futex resumed>) = 0 [pid 10288] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10286] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10286] <... futex resumed>) = 0 [pid 10288] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10286] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10288] <... open resumed>) = 5 [pid 10287] <... munmap resumed>) = 0 [pid 10288] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10286] <... futex resumed>) = 0 [pid 10287] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10288] <... futex resumed>) = 1 [pid 10286] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10288] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10287] <... openat resumed>) = 6 [pid 10286] <... futex resumed>) = 0 [pid 10288] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10287] ioctl(6, LOOP_SET_FD, 3 [pid 10286] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10288] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10288] <... futex resumed>) = 0 [pid 10288] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10287] <... ioctl resumed>) = 0 [pid 10287] close(3) = 0 [pid 10287] mkdir("./file1", 0777) = 0 [pid 10287] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10287] ioctl(6, LOOP_CLR_FD) = 0 [pid 10287] close(6) = 0 [pid 10287] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10287] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10286] exit_group(0 [pid 10288] <... futex resumed>) = ? [pid 10286] <... exit_group resumed>) = ? [pid 10288] +++ exited with 0 +++ [pid 10287] <... futex resumed>) = ? [pid 10287] +++ exited with 0 +++ [pid 10286] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10286, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1094", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1094", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1094/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1094/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1094/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1094/bus") = 0 [pid 5052] umount2("./1094/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1094/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1094/binderfs") = 0 [pid 5052] umount2("./1094/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1094/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1094/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1094/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1094/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1094") = 0 [pid 5052] mkdir("./1095", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10289 attached , child_tidptr=0x555556d60690) = 10289 [pid 10289] set_robust_list(0x555556d606a0, 24) = 0 [pid 10289] chdir("./1095") = 0 [pid 10289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10289] setpgid(0, 0) = 0 [pid 10289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10289] write(3, "1000", 4) = 4 [pid 10289] close(3) = 0 [pid 10289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10289] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10289] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10289] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10289] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10289] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10290 attached [pid 10290] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10290] set_robust_list(0x7f55300e29a0, 24 [pid 10289] <... clone3 resumed> => {parent_tid=[10290]}, 88) = 10290 [pid 10290] <... set_robust_list resumed>) = 0 [pid 10289] rt_sigprocmask(SIG_SETMASK, [], [pid 10290] rt_sigprocmask(SIG_SETMASK, [], [pid 10289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10289] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10290] memfd_create("syzkaller", 0 [pid 10289] <... futex resumed>) = 0 [pid 10289] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10290] <... memfd_create resumed>) = 3 [pid 10289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10289] <... mmap resumed>) = 0x7f55300a1000 [pid 10290] <... mmap resumed>) = 0x7f5527ca1000 [ 260.499716][T10287] loop0: detected capacity change from 0 to 512 [ 260.509999][T10287] ext4: Unknown parameter 'nouser_xattr' [pid 10290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10289] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10289] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10291]}, 88) = 10291 [pid 10289] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10289] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10289] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10291 attached [pid 10290] <... write resumed>) = 262144 [pid 10290] munmap(0x7f5527ca1000, 262144) = 0 [pid 10290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10290] ioctl(4, LOOP_SET_FD, 3 [pid 10291] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10290] <... ioctl resumed>) = 0 [pid 10290] close(3) = 0 [pid 10290] mkdir("./file1", 0777 [pid 10291] <... rseq resumed>) = 0 [pid 10291] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10291] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10291] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10290] <... mkdir resumed>) = 0 [pid 10290] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10291] <... open resumed>) = 3 [pid 10291] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10290] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10290] ioctl(4, LOOP_CLR_FD) = 0 [pid 10290] close(4) = 0 [pid 10290] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10290] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10291] <... futex resumed>) = 1 [pid 10289] <... futex resumed>) = 0 [pid 10289] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10289] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10290] <... futex resumed>) = 0 [pid 10290] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10290] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10291] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10290] <... futex resumed>) = 1 [pid 10289] <... futex resumed>) = 0 [pid 10289] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10290] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10289] <... futex resumed>) = 0 [pid 10290] <... open resumed>) = 4 [pid 10289] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10290] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10289] <... futex resumed>) = 0 [pid 10289] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10289] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10290] <... futex resumed>) = 1 [pid 10290] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10290] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10289] <... futex resumed>) = 0 [pid 10290] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10289] exit_group(0 [pid 10291] <... futex resumed>) = ? [pid 10289] <... exit_group resumed>) = ? [pid 10291] +++ exited with 0 +++ [pid 10290] <... futex resumed>) = ? [pid 10290] +++ exited with 0 +++ [pid 10289] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10289, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1095", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1095", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1095/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1095/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1095/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1095/bus") = 0 [pid 5052] umount2("./1095/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1095/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1095/binderfs") = 0 [pid 5052] umount2("./1095/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1095/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1095/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1095/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1095/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 260.571555][T10290] loop0: detected capacity change from 0 to 512 [ 260.582998][T10290] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1095") = 0 [pid 5052] mkdir("./1096", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10292 attached , child_tidptr=0x555556d60690) = 10292 [pid 10292] set_robust_list(0x555556d606a0, 24) = 0 [pid 10292] chdir("./1096") = 0 [pid 10292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10292] setpgid(0, 0) = 0 [pid 10292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10292] write(3, "1000", 4) = 4 [pid 10292] close(3) = 0 [pid 10292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10292] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10292] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10292] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10292] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10292] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10293]}, 88) = 10293 [pid 10292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10292] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10293 attached [pid 10292] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10292] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10292] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10293] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10292] <... clone3 resumed> => {parent_tid=[10294]}, 88) = 10294 ./strace-static-x86_64: Process 10294 attached [pid 10293] <... rseq resumed>) = 0 [pid 10292] rt_sigprocmask(SIG_SETMASK, [], [pid 10293] set_robust_list(0x7f55300e29a0, 24 [pid 10294] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10294] <... rseq resumed>) = 0 [pid 10293] <... set_robust_list resumed>) = 0 [pid 10294] set_robust_list(0x7f55300c19a0, 24 [pid 10293] rt_sigprocmask(SIG_SETMASK, [], [pid 10294] <... set_robust_list resumed>) = 0 [pid 10293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10293] memfd_create("syzkaller", 0 [pid 10292] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10294] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10292] <... futex resumed>) = 0 [pid 10293] <... memfd_create resumed>) = 3 [pid 10292] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10294] <... open resumed>) = 4 [pid 10293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10294] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10293] <... mmap resumed>) = 0x7f5527ca1000 [pid 10294] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10292] <... futex resumed>) = 0 [pid 10292] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10294] <... futex resumed>) = 0 [pid 10292] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10294] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10294] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10292] <... futex resumed>) = 0 [pid 10294] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10292] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10292] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10294] <... open resumed>) = 5 [pid 10294] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10292] <... futex resumed>) = 0 [pid 10294] <... futex resumed>) = 1 [pid 10292] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10292] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10294] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10294] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10293] <... write resumed>) = 262144 [pid 10292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10294] <... futex resumed>) = 0 [pid 10293] munmap(0x7f5527ca1000, 262144 [pid 10294] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10293] <... munmap resumed>) = 0 [pid 10293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10293] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10293] close(3) = 0 [pid 10293] mkdir("./file1", 0777) = 0 [pid 10293] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10293] ioctl(6, LOOP_CLR_FD) = 0 [pid 10293] close(6) = 0 [pid 10293] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10293] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10292] exit_group(0) = ? [pid 10294] <... futex resumed>) = ? [pid 10294] +++ exited with 0 +++ [pid 10293] <... futex resumed>) = ? [pid 10293] +++ exited with 0 +++ [pid 10292] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10292, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1096", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1096", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1096/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1096/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1096/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1096/bus") = 0 [pid 5052] umount2("./1096/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1096/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1096/binderfs") = 0 [pid 5052] umount2("./1096/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1096/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1096/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1096/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1096/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 260.686970][T10293] loop0: detected capacity change from 0 to 512 [ 260.700019][T10293] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1096") = 0 [pid 5052] mkdir("./1097", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10295 attached , child_tidptr=0x555556d60690) = 10295 [pid 10295] set_robust_list(0x555556d606a0, 24) = 0 [pid 10295] chdir("./1097") = 0 [pid 10295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10295] setpgid(0, 0) = 0 [pid 10295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10295] write(3, "1000", 4) = 4 [pid 10295] close(3) = 0 [pid 10295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10295] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10295] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10295] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10296 attached [pid 10296] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10295] <... clone3 resumed> => {parent_tid=[10296]}, 88) = 10296 [pid 10296] set_robust_list(0x7f55300e29a0, 24 [pid 10295] rt_sigprocmask(SIG_SETMASK, [], [pid 10296] <... set_robust_list resumed>) = 0 [pid 10295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10296] rt_sigprocmask(SIG_SETMASK, [], [pid 10295] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10295] <... futex resumed>) = 0 [pid 10296] memfd_create("syzkaller", 0 [pid 10295] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10296] <... memfd_create resumed>) = 3 [pid 10295] <... mmap resumed>) = 0x7f55300a1000 [pid 10296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10295] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10297]}, 88) = 10297 [pid 10295] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10297 attached [pid 10297] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10297] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10297] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10295] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10295] <... futex resumed>) = 0 [pid 10297] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10295] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10297] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10297] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10295] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10295] <... futex resumed>) = 0 [pid 10297] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10295] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10297] <... mount resumed>) = 0 [pid 10296] <... write resumed>) = 262144 [pid 10296] munmap(0x7f5527ca1000, 262144 [pid 10297] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10295] <... futex resumed>) = 0 [pid 10297] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10295] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10297] <... futex resumed>) = 0 [pid 10295] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10297] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10296] <... munmap resumed>) = 0 [pid 10296] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10297] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10295] <... futex resumed>) = 0 [pid 10297] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10296] <... openat resumed>) = 6 [pid 10295] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10296] ioctl(6, LOOP_SET_FD, 3 [pid 10295] <... futex resumed>) = 1 [pid 10297] <... futex resumed>) = 0 [pid 10295] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10297] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10296] <... ioctl resumed>) = 0 [pid 10296] close(3) = 0 [pid 10296] mkdir("./file1", 0777) = 0 [pid 10296] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10296] ioctl(6, LOOP_CLR_FD) = 0 [pid 10297] <... write resumed>) = 262144 [pid 10297] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10296] close(6 [pid 10297] <... futex resumed>) = 1 [pid 10296] <... close resumed>) = 0 [pid 10295] <... futex resumed>) = 0 [pid 10297] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10296] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10295] exit_group(0 [pid 10297] <... futex resumed>) = ? [pid 10295] <... exit_group resumed>) = ? [pid 10297] +++ exited with 0 +++ [pid 10296] +++ exited with 0 +++ [pid 10295] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10295, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1097", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1097", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1097/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1097/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1097/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1097/bus") = 0 [pid 5052] umount2("./1097/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1097/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1097/binderfs") = 0 [pid 5052] umount2("./1097/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1097/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1097/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1097/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1097/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1097") = 0 [pid 5052] mkdir("./1098", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10298 attached , child_tidptr=0x555556d60690) = 10298 [pid 10298] set_robust_list(0x555556d606a0, 24) = 0 [pid 10298] chdir("./1098") = 0 [pid 10298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10298] setpgid(0, 0) = 0 [pid 10298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10298] write(3, "1000", 4) = 4 [pid 10298] close(3) = 0 [pid 10298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10298] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10298] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10298] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10299 attached [pid 10299] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10298] <... clone3 resumed> => {parent_tid=[10299]}, 88) = 10299 [pid 10299] <... rseq resumed>) = 0 [pid 10298] rt_sigprocmask(SIG_SETMASK, [], [pid 10299] set_robust_list(0x7f55300e29a0, 24 [pid 10298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10299] <... set_robust_list resumed>) = 0 [pid 10298] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10299] rt_sigprocmask(SIG_SETMASK, [], [pid 10298] <... futex resumed>) = 0 [pid 10299] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 260.800631][T10296] loop0: detected capacity change from 0 to 512 [ 260.812292][T10296] ext4: Unknown parameter 'nouser_xattr' [pid 10298] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10299] memfd_create("syzkaller", 0 [pid 10298] <... futex resumed>) = 0 [pid 10298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10299] <... memfd_create resumed>) = 3 [pid 10299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10298] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10299] <... mmap resumed>) = 0x7f5527ca1000 [pid 10298] <... mprotect resumed>) = 0 [pid 10299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10300 attached [pid 10300] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10300] set_robust_list(0x7f55300c19a0, 24 [pid 10298] <... clone3 resumed> => {parent_tid=[10300]}, 88) = 10300 [pid 10300] <... set_robust_list resumed>) = 0 [pid 10298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10298] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10298] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10299] <... write resumed>) = 262144 [pid 10299] munmap(0x7f5527ca1000, 262144 [pid 10300] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10299] <... munmap resumed>) = 0 [pid 10300] <... open resumed>) = 4 [pid 10300] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10298] <... futex resumed>) = 0 [pid 10300] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10298] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10298] <... futex resumed>) = 0 [pid 10300] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10298] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10300] <... mount resumed>) = 0 [pid 10300] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10299] ioctl(5, LOOP_SET_FD, 3 [pid 10300] <... futex resumed>) = 1 [pid 10298] <... futex resumed>) = 0 [pid 10300] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10298] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10300] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10300] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10300] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 10300] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10299] <... ioctl resumed>) = 0 [pid 10298] <... futex resumed>) = 1 [pid 10299] close(3) = 0 [pid 10299] mkdir("./file1", 0777 [pid 10298] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10298] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10300] <... futex resumed>) = 0 [pid 10299] <... mkdir resumed>) = 0 [pid 10298] <... futex resumed>) = 1 [pid 10300] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10298] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10299] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10299] ioctl(5, LOOP_CLR_FD) = 0 [pid 10299] close(5) = 0 [pid 10299] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10299] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10300] <... write resumed>) = 262144 [pid 10300] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10298] <... futex resumed>) = 0 [pid 10300] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10298] exit_group(0 [pid 10300] <... futex resumed>) = ? [pid 10299] <... futex resumed>) = ? [pid 10298] <... exit_group resumed>) = ? [pid 10300] +++ exited with 0 +++ [pid 10299] +++ exited with 0 +++ [pid 10298] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10298, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1098", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1098", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1098/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1098/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1098/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1098/bus") = 0 [pid 5052] umount2("./1098/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1098/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1098/binderfs") = 0 [pid 5052] umount2("./1098/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1098/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1098/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 260.881279][T10299] loop0: detected capacity change from 0 to 512 [ 260.894481][T10299] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "./1098/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1098/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1098") = 0 [pid 5052] mkdir("./1099", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = 0 [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10301 attached , child_tidptr=0x555556d60690) = 10301 [pid 10301] set_robust_list(0x555556d606a0, 24) = 0 [pid 10301] chdir("./1099") = 0 [pid 10301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10301] setpgid(0, 0) = 0 [pid 10301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10301] write(3, "1000", 4) = 4 [pid 10301] close(3) = 0 [pid 10301] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10301] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10301] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10301] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10301] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10302 attached [pid 10302] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10301] <... clone3 resumed> => {parent_tid=[10302]}, 88) = 10302 [pid 10302] <... rseq resumed>) = 0 [pid 10301] rt_sigprocmask(SIG_SETMASK, [], [pid 10302] set_robust_list(0x7f55300e29a0, 24 [pid 10301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10302] <... set_robust_list resumed>) = 0 [pid 10302] rt_sigprocmask(SIG_SETMASK, [], [pid 10301] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10301] <... futex resumed>) = 0 [pid 10302] memfd_create("syzkaller", 0 [pid 10301] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10302] <... memfd_create resumed>) = 3 [pid 10301] <... mmap resumed>) = 0x7f55300a1000 [pid 10302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10301] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10301] <... clone3 resumed> => {parent_tid=[10303]}, 88) = 10303 [pid 10301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 10303 attached [pid 10302] <... write resumed>) = 262144 [pid 10301] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10301] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10302] munmap(0x7f5527ca1000, 262144 [pid 10303] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10303] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10303] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10303] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10301] <... futex resumed>) = 0 [pid 10303] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10301] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10301] <... futex resumed>) = 0 [pid 10303] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10301] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10303] <... mount resumed>) = 0 [pid 10303] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10301] <... futex resumed>) = 0 [pid 10303] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10301] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10301] <... futex resumed>) = 0 [pid 10303] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10301] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10303] <... open resumed>) = 5 [pid 10302] <... munmap resumed>) = 0 [pid 10303] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10301] <... futex resumed>) = 0 [pid 10303] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10301] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10302] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10301] <... futex resumed>) = 0 [pid 10303] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10302] <... openat resumed>) = 6 [pid 10301] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10302] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10302] close(3) = 0 [pid 10302] mkdir("./file1", 0777) = 0 [pid 10302] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10302] ioctl(6, LOOP_CLR_FD) = 0 [pid 10302] close(6 [pid 10303] <... write resumed>) = 262144 [pid 10303] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10301] <... futex resumed>) = 0 [pid 10303] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10302] <... close resumed>) = 0 [pid 10302] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10301] exit_group(0 [pid 10303] <... futex resumed>) = ? [pid 10302] <... futex resumed>) = ? [pid 10301] <... exit_group resumed>) = ? [pid 10303] +++ exited with 0 +++ [pid 10302] +++ exited with 0 +++ [pid 10301] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10301, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1099", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1099", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1099/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1099/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1099/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1099/bus") = 0 [pid 5052] umount2("./1099/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1099/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1099/binderfs") = 0 [pid 5052] umount2("./1099/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1099/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1099/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1099/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1099/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 260.981669][T10302] loop0: detected capacity change from 0 to 512 [ 260.992448][T10302] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1099") = 0 [pid 5052] mkdir("./1100", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10304 attached , child_tidptr=0x555556d60690) = 10304 [pid 10304] set_robust_list(0x555556d606a0, 24) = 0 [pid 10304] chdir("./1100") = 0 [pid 10304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10304] setpgid(0, 0) = 0 [pid 10304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10304] write(3, "1000", 4) = 4 [pid 10304] close(3) = 0 [pid 10304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10304] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10304] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10304] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10305]}, 88) = 10305 ./strace-static-x86_64: Process 10305 attached [pid 10304] rt_sigprocmask(SIG_SETMASK, [], [pid 10305] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10305] <... rseq resumed>) = 0 [pid 10304] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10305] set_robust_list(0x7f55300e29a0, 24 [pid 10304] <... futex resumed>) = 0 [pid 10305] <... set_robust_list resumed>) = 0 [pid 10304] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10305] rt_sigprocmask(SIG_SETMASK, [], [pid 10304] <... futex resumed>) = 0 [pid 10305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10305] memfd_create("syzkaller", 0 [pid 10304] <... mmap resumed>) = 0x7f55300a1000 [pid 10304] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10305] <... memfd_create resumed>) = 3 [pid 10305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10304] <... mprotect resumed>) = 0 [pid 10305] <... mmap resumed>) = 0x7f5527ca1000 [pid 10304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10306]}, 88) = 10306 [pid 10304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10304] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10304] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10306 attached [pid 10306] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10306] <... rseq resumed>) = 0 [pid 10306] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10306] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10306] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10306] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10304] <... futex resumed>) = 0 [pid 10304] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10306] <... futex resumed>) = 0 [pid 10304] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10306] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10306] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10306] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10304] <... futex resumed>) = 0 [pid 10305] <... write resumed>) = 262144 [pid 10305] munmap(0x7f5527ca1000, 262144) = 0 [pid 10305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10305] ioctl(5, LOOP_SET_FD, 3 [pid 10304] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10304] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10306] <... futex resumed>) = 0 [pid 10306] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10306] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10304] <... futex resumed>) = 0 [pid 10306] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10304] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10304] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10306] <... futex resumed>) = 0 [pid 10306] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10305] <... ioctl resumed>) = 0 [pid 10305] close(3) = 0 [pid 10305] mkdir("./file1", 0777) = 0 [pid 10305] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10305] ioctl(5, LOOP_CLR_FD) = 0 [pid 10305] close(5) = 0 [pid 10305] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10305] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10306] <... write resumed>) = 262144 [pid 10306] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10304] <... futex resumed>) = 0 [pid 10306] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10304] exit_group(0 [pid 10306] <... futex resumed>) = ? [pid 10305] <... futex resumed>) = ? [pid 10304] <... exit_group resumed>) = ? [pid 10306] +++ exited with 0 +++ [pid 10305] +++ exited with 0 +++ [pid 10304] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10304, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] umount2("./1100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1100/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1100/bus") = 0 [pid 5052] umount2("./1100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1100/binderfs") = 0 [pid 5052] umount2("./1100/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1100/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1100/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1100/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [ 261.106267][T10305] loop0: detected capacity change from 0 to 512 [ 261.117616][T10305] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1100/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1100") = 0 [pid 5052] mkdir("./1101", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10307 attached , child_tidptr=0x555556d60690) = 10307 [pid 10307] set_robust_list(0x555556d606a0, 24) = 0 [pid 10307] chdir("./1101") = 0 [pid 10307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10307] setpgid(0, 0) = 0 [pid 10307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10307] write(3, "1000", 4) = 4 [pid 10307] close(3) = 0 [pid 10307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10307] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10307] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10307] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10308 attached [pid 10308] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10307] <... clone3 resumed> => {parent_tid=[10308]}, 88) = 10308 [pid 10308] <... rseq resumed>) = 0 [pid 10307] rt_sigprocmask(SIG_SETMASK, [], [pid 10308] set_robust_list(0x7f55300e29a0, 24 [pid 10307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10308] <... set_robust_list resumed>) = 0 [pid 10308] rt_sigprocmask(SIG_SETMASK, [], [pid 10307] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10307] <... futex resumed>) = 0 [pid 10308] memfd_create("syzkaller", 0 [pid 10307] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10308] <... memfd_create resumed>) = 3 [pid 10307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10307] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10307] <... mprotect resumed>) = 0 [pid 10308] <... mmap resumed>) = 0x7f5527ca1000 [pid 10307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10309]}, 88) = 10309 ./strace-static-x86_64: Process 10309 attached [pid 10307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10307] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10309] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10307] <... futex resumed>) = 0 [pid 10309] <... rseq resumed>) = 0 [pid 10307] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10309] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10309] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10309] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10308] <... write resumed>) = 262144 [pid 10309] <... futex resumed>) = 1 [pid 10308] munmap(0x7f5527ca1000, 262144 [pid 10309] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10307] <... futex resumed>) = 0 [pid 10307] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10307] <... futex resumed>) = 0 [pid 10309] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10308] <... munmap resumed>) = 0 [pid 10307] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10308] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10309] <... mount resumed>) = 0 [pid 10309] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10308] <... openat resumed>) = 5 [pid 10309] <... futex resumed>) = 1 [pid 10308] ioctl(5, LOOP_SET_FD, 3 [pid 10307] <... futex resumed>) = 0 [pid 10309] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10307] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10307] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10309] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10309] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10307] <... futex resumed>) = 0 [pid 10307] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10307] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10309] <... futex resumed>) = 1 [pid 10309] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10308] <... ioctl resumed>) = 0 [pid 10308] close(3) = 0 [pid 10308] mkdir("./file1", 0777) = 0 [pid 10308] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10309] <... write resumed>) = 262144 [pid 10309] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10308] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10309] <... futex resumed>) = 1 [pid 10308] ioctl(5, LOOP_CLR_FD [pid 10309] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10307] <... futex resumed>) = 0 [pid 10308] <... ioctl resumed>) = 0 [pid 10308] close(5) = 0 [pid 10308] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10308] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10307] exit_group(0 [pid 10309] <... futex resumed>) = ? [pid 10308] <... futex resumed>) = ? [pid 10307] <... exit_group resumed>) = ? [pid 10308] +++ exited with 0 +++ [pid 10309] +++ exited with 0 +++ [pid 10307] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10307, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1101/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 261.222132][T10308] loop0: detected capacity change from 0 to 512 [ 261.234278][T10308] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1101/bus") = 0 [pid 5052] umount2("./1101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1101/binderfs") = 0 [pid 5052] umount2("./1101/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1101/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1101/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1101/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1101/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1101") = 0 [pid 5052] mkdir("./1102", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10310 attached , child_tidptr=0x555556d60690) = 10310 [pid 10310] set_robust_list(0x555556d606a0, 24) = 0 [pid 10310] chdir("./1102") = 0 [pid 10310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10310] setpgid(0, 0) = 0 [pid 10310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10310] write(3, "1000", 4) = 4 [pid 10310] close(3) = 0 [pid 10310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10310] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10310] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10310] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10310] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10311]}, 88) = 10311 ./strace-static-x86_64: Process 10311 attached [pid 10310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10310] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10310] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10311] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10311] set_robust_list(0x7f55300e29a0, 24 [pid 10310] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10311] <... set_robust_list resumed>) = 0 [pid 10310] <... mprotect resumed>) = 0 [pid 10311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10310] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10311] memfd_create("syzkaller", 0 [pid 10310] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10311] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 10312 attached [pid 10311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10312] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10310] <... clone3 resumed> => {parent_tid=[10312]}, 88) = 10312 [pid 10312] <... rseq resumed>) = 0 [pid 10310] rt_sigprocmask(SIG_SETMASK, [], [pid 10312] set_robust_list(0x7f55300c19a0, 24 [pid 10310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10312] <... set_robust_list resumed>) = 0 [pid 10310] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10310] <... futex resumed>) = 0 [pid 10312] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10310] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10312] <... open resumed>) = 4 [pid 10311] <... mmap resumed>) = 0x7f5527ca1000 [pid 10312] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10310] <... futex resumed>) = 0 [pid 10310] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10312] <... futex resumed>) = 1 [pid 10310] <... futex resumed>) = 0 [pid 10312] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10310] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10312] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10310] <... futex resumed>) = 0 [pid 10311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10310] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10312] <... futex resumed>) = 1 [pid 10310] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10312] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10312] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10310] <... futex resumed>) = 0 [pid 10312] <... futex resumed>) = 1 [pid 10310] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10312] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10310] <... futex resumed>) = 0 [pid 10312] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10312] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10310] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10312] <... futex resumed>) = 0 [pid 10310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10312] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10311] <... write resumed>) = 262144 [pid 10311] munmap(0x7f5527ca1000, 262144) = 0 [pid 10311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10311] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10311] close(3) = 0 [pid 10311] mkdir("./file1", 0777) = 0 [pid 10311] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10311] ioctl(6, LOOP_CLR_FD) = 0 [pid 10311] close(6) = 0 [pid 10311] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10311] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10310] exit_group(0 [pid 10312] <... futex resumed>) = ? [pid 10311] <... futex resumed>) = ? [pid 10310] <... exit_group resumed>) = ? [pid 10312] +++ exited with 0 +++ [pid 10311] +++ exited with 0 +++ [pid 10310] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10310, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1102/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1102/bus") = 0 [pid 5052] umount2("./1102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1102/binderfs") = 0 [pid 5052] umount2("./1102/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1102/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1102/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1102/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1102/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1102") = 0 [pid 5052] mkdir("./1103", 0777) = 0 [ 261.354303][T10311] loop0: detected capacity change from 0 to 512 [ 261.364294][T10311] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10313 ./strace-static-x86_64: Process 10313 attached [pid 10313] set_robust_list(0x555556d606a0, 24) = 0 [pid 10313] chdir("./1103") = 0 [pid 10313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10313] setpgid(0, 0) = 0 [pid 10313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10313] write(3, "1000", 4) = 4 [pid 10313] close(3) = 0 [pid 10313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10313] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10313] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10313] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10313] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10314]}, 88) = 10314 ./strace-static-x86_64: Process 10314 attached [pid 10313] rt_sigprocmask(SIG_SETMASK, [], [pid 10314] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10313] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10314] set_robust_list(0x7f55300e29a0, 24 [pid 10313] <... futex resumed>) = 0 [pid 10314] <... set_robust_list resumed>) = 0 [pid 10313] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10314] memfd_create("syzkaller", 0 [pid 10313] <... mmap resumed>) = 0x7f55300a1000 [pid 10313] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10314] <... memfd_create resumed>) = 3 [pid 10313] <... mprotect resumed>) = 0 [pid 10313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10314] <... mmap resumed>) = 0x7f5527ca1000 [pid 10313] <... clone3 resumed> => {parent_tid=[10315]}, 88) = 10315 [pid 10313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10313] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10315 attached [pid 10314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10315] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10313] <... futex resumed>) = 0 [pid 10313] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10315] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10314] <... write resumed>) = 262144 [pid 10314] munmap(0x7f5527ca1000, 262144 [pid 10315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10315] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10314] <... munmap resumed>) = 0 [pid 10315] <... open resumed>) = 4 [pid 10314] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10315] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10314] <... openat resumed>) = 5 [pid 10314] ioctl(5, LOOP_SET_FD, 3 [pid 10315] <... futex resumed>) = 1 [pid 10314] <... ioctl resumed>) = 0 [pid 10314] close(3 [pid 10315] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10314] <... close resumed>) = 0 [pid 10314] mkdir("./file1", 0777 [pid 10313] <... futex resumed>) = 0 [pid 10313] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10313] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10315] <... futex resumed>) = 0 [pid 10314] <... mkdir resumed>) = 0 [pid 10315] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10314] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10315] <... mount resumed>) = 0 [pid 10315] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10314] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10313] <... futex resumed>) = 0 [pid 10315] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10313] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10313] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10315] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10314] ioctl(5, LOOP_CLR_FD [pid 10315] <... open resumed>) = 3 [pid 10314] <... ioctl resumed>) = 0 [pid 10314] close(5) = 0 [pid 10314] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10314] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10315] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10313] <... futex resumed>) = 0 [pid 10313] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10314] <... futex resumed>) = 0 [pid 10313] <... futex resumed>) = 1 [pid 10314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10313] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10315] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10314] <... write resumed>) = 262144 [pid 10314] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10313] <... futex resumed>) = 0 [pid 10314] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10313] exit_group(0 [pid 10314] <... futex resumed>) = ? [pid 10313] <... exit_group resumed>) = ? [pid 10314] +++ exited with 0 +++ [pid 10315] <... futex resumed>) = ? [pid 10315] +++ exited with 0 +++ [pid 10313] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10313, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1103/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1103/bus") = 0 [pid 5052] umount2("./1103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 261.465032][T10314] loop0: detected capacity change from 0 to 512 [ 261.475823][T10314] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1103/binderfs") = 0 [pid 5052] umount2("./1103/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1103/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1103/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1103/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1103/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1103") = 0 [pid 5052] mkdir("./1104", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10316 attached , child_tidptr=0x555556d60690) = 10316 [pid 10316] set_robust_list(0x555556d606a0, 24) = 0 [pid 10316] chdir("./1104") = 0 [pid 10316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10316] setpgid(0, 0) = 0 [pid 10316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10316] write(3, "1000", 4) = 4 [pid 10316] close(3) = 0 [pid 10316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10316] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10316] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10316] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10317 attached => {parent_tid=[10317]}, 88) = 10317 [pid 10317] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10317] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10316] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10316] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10316] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10317] memfd_create("syzkaller", 0 [pid 10316] <... mprotect resumed>) = 0 [pid 10316] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10317] <... memfd_create resumed>) = 3 [pid 10316] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10317] <... mmap resumed>) = 0x7f5527ca1000 ./strace-static-x86_64: Process 10318 attached [pid 10317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10318] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10316] <... clone3 resumed> => {parent_tid=[10318]}, 88) = 10318 [pid 10318] <... rseq resumed>) = 0 [pid 10317] <... write resumed>) = 262144 [pid 10316] rt_sigprocmask(SIG_SETMASK, [], [pid 10318] set_robust_list(0x7f55300c19a0, 24 [pid 10316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10318] <... set_robust_list resumed>) = 0 [pid 10316] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10318] rt_sigprocmask(SIG_SETMASK, [], [pid 10316] <... futex resumed>) = 0 [pid 10318] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10316] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10318] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10317] munmap(0x7f5527ca1000, 262144 [pid 10318] <... open resumed>) = 4 [pid 10317] <... munmap resumed>) = 0 [pid 10317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10317] ioctl(5, LOOP_SET_FD, 3 [pid 10318] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10316] <... futex resumed>) = 0 [pid 10316] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10318] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10316] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10318] <... mount resumed>) = 0 [pid 10318] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10316] <... futex resumed>) = 0 [pid 10316] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10316] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10318] <... futex resumed>) = 1 [pid 10318] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10318] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10316] <... futex resumed>) = 0 [pid 10316] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10318] <... futex resumed>) = 1 [pid 10316] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10317] <... ioctl resumed>) = 0 [pid 10317] close(3 [pid 10318] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10317] <... close resumed>) = 0 [pid 10317] mkdir("./file1", 0777) = 0 [pid 10317] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10317] ioctl(5, LOOP_CLR_FD) = 0 [pid 10317] close(5) = 0 [pid 10317] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10317] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10318] <... write resumed>) = 262144 [pid 10318] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10316] <... futex resumed>) = 0 [pid 10316] exit_group(0 [pid 10318] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 10318] +++ exited with 0 +++ [pid 10317] <... futex resumed>) = ? [pid 10316] <... exit_group resumed>) = ? [pid 10317] +++ exited with 0 +++ [pid 10316] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10316, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 261.583299][T10317] loop0: detected capacity change from 0 to 512 [ 261.594488][T10317] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1104/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1104/bus") = 0 [pid 5052] umount2("./1104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1104/binderfs") = 0 [pid 5052] umount2("./1104/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1104/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1104/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1104/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1104/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1104") = 0 [pid 5052] mkdir("./1105", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10319 attached , child_tidptr=0x555556d60690) = 10319 [pid 10319] set_robust_list(0x555556d606a0, 24) = 0 [pid 10319] chdir("./1105") = 0 [pid 10319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10319] setpgid(0, 0) = 0 [pid 10319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10319] write(3, "1000", 4) = 4 [pid 10319] close(3) = 0 [pid 10319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10319] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10319] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10319] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10320]}, 88) = 10320 [pid 10319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10319] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10319] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10319] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10321 attached [pid 10321] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10319] <... clone3 resumed> => {parent_tid=[10321]}, 88) = 10321 [pid 10321] <... rseq resumed>) = 0 [pid 10319] rt_sigprocmask(SIG_SETMASK, [], [pid 10321] set_robust_list(0x7f55300c19a0, 24 [pid 10319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10321] <... set_robust_list resumed>) = 0 [pid 10319] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10321] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10320 attached NULL, 8) = 0 [pid 10320] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10319] <... futex resumed>) = 0 [pid 10321] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10320] <... rseq resumed>) = 0 [pid 10319] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10320] set_robust_list(0x7f55300e29a0, 24 [pid 10321] <... open resumed>) = 3 [pid 10320] <... set_robust_list resumed>) = 0 [pid 10320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10320] memfd_create("syzkaller", 0 [pid 10321] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10320] <... memfd_create resumed>) = 4 [pid 10321] <... futex resumed>) = 1 [pid 10320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10319] <... futex resumed>) = 0 [pid 10321] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10319] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10319] <... futex resumed>) = 0 [pid 10321] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10320] <... mmap resumed>) = 0x7f5527ca1000 [pid 10319] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10321] <... mount resumed>) = 0 [pid 10321] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10319] <... futex resumed>) = 0 [pid 10321] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10319] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10321] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10319] <... futex resumed>) = 0 [pid 10319] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10321] <... open resumed>) = 5 [pid 10320] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10321] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10319] <... futex resumed>) = 0 [pid 10321] <... futex resumed>) = 1 [pid 10319] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10321] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10319] <... futex resumed>) = 0 [pid 10321] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10319] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10321] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10321] <... futex resumed>) = 0 [pid 10321] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10320] <... write resumed>) = 262144 [pid 10320] munmap(0x7f5527ca1000, 262144) = 0 [pid 10320] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10320] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10320] close(4) = 0 [pid 10320] mkdir("./file1", 0777) = 0 [pid 10320] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10320] ioctl(6, LOOP_CLR_FD) = 0 [pid 10320] close(6) = 0 [pid 10320] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10319] exit_group(0) = ? [pid 10321] <... futex resumed>) = ? [pid 10321] +++ exited with 0 +++ [pid 10320] <... futex resumed>) = ? [pid 10320] +++ exited with 0 +++ [pid 10319] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10319, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1105/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1105/bus") = 0 [pid 5052] umount2("./1105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1105/binderfs") = 0 [pid 5052] umount2("./1105/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1105/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1105/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1105/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1105/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1105") = 0 [pid 5052] mkdir("./1106", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 261.708423][T10320] loop0: detected capacity change from 0 to 512 [ 261.717943][T10320] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10322 attached , child_tidptr=0x555556d60690) = 10322 [pid 10322] set_robust_list(0x555556d606a0, 24) = 0 [pid 10322] chdir("./1106") = 0 [pid 10322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10322] setpgid(0, 0) = 0 [pid 10322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10322] write(3, "1000", 4) = 4 [pid 10322] close(3) = 0 [pid 10322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10322] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10322] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10322] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10322] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10322] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10323 attached [pid 10323] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10323] set_robust_list(0x7f55300e29a0, 24 [pid 10322] <... clone3 resumed> => {parent_tid=[10323]}, 88) = 10323 [pid 10323] <... set_robust_list resumed>) = 0 [pid 10322] rt_sigprocmask(SIG_SETMASK, [], [pid 10323] rt_sigprocmask(SIG_SETMASK, [], [pid 10322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10322] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10323] memfd_create("syzkaller", 0 [pid 10322] <... futex resumed>) = 0 [pid 10322] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10323] <... memfd_create resumed>) = 3 [pid 10322] <... mmap resumed>) = 0x7f55300a1000 [pid 10323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10322] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10322] <... mprotect resumed>) = 0 [pid 10322] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10324]}, 88) = 10324 [pid 10322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10322] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10322] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10323] <... write resumed>) = 262144 [pid 10323] munmap(0x7f5527ca1000, 262144) = 0 [pid 10323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10323] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 10324 attached [pid 10324] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10324] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10324] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10323] <... ioctl resumed>) = 0 [pid 10323] close(3) = 0 [pid 10323] mkdir("./file1", 0777 [pid 10324] <... open resumed>) = 5 [pid 10324] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10324] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10322] <... futex resumed>) = 0 [pid 10322] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10324] <... futex resumed>) = 0 [pid 10322] <... futex resumed>) = 1 [pid 10324] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10322] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10323] <... mkdir resumed>) = 0 [pid 10323] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10324] <... mount resumed>) = 0 [pid 10324] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10322] <... futex resumed>) = 0 [pid 10324] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10322] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10324] <... futex resumed>) = 0 [pid 10322] <... futex resumed>) = 1 [pid 10324] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10322] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10324] <... open resumed>) = 3 [pid 10324] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10322] <... futex resumed>) = 0 [pid 10324] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10322] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10322] <... futex resumed>) = 0 [pid 10324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10323] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10322] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10323] ioctl(4, LOOP_CLR_FD) = 0 [pid 10323] close(4) = 0 [pid 10323] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10323] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10324] <... write resumed>) = 262144 [pid 10324] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10322] <... futex resumed>) = 0 [pid 10324] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10322] exit_group(0 [pid 10324] <... futex resumed>) = ? [pid 10323] <... futex resumed>) = ? [pid 10322] <... exit_group resumed>) = ? [pid 10324] +++ exited with 0 +++ [pid 10323] +++ exited with 0 +++ [pid 10322] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10322, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] umount2("./1106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1106/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1106/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1106/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1106/bus") = 0 [pid 5052] umount2("./1106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1106/binderfs") = 0 [ 261.803608][T10323] loop0: detected capacity change from 0 to 512 [ 261.818914][T10323] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1106/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1106/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1106/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1106/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1106/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1106") = 0 [pid 5052] mkdir("./1107", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10325 attached , child_tidptr=0x555556d60690) = 10325 [pid 10325] set_robust_list(0x555556d606a0, 24) = 0 [pid 10325] chdir("./1107") = 0 [pid 10325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10325] setpgid(0, 0) = 0 [pid 10325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10325] write(3, "1000", 4) = 4 [pid 10325] close(3) = 0 [pid 10325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10325] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10325] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10325] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10326 attached => {parent_tid=[10326]}, 88) = 10326 [pid 10325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10325] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10326] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10325] <... futex resumed>) = 0 [pid 10326] <... rseq resumed>) = 0 [pid 10326] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10326] memfd_create("syzkaller", 0) = 3 [pid 10326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10325] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5527ca1000 [pid 10325] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10327 attached [pid 10326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10327] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053) = 0 [pid 10325] <... clone3 resumed> => {parent_tid=[10327]}, 88) = 10327 [pid 10327] set_robust_list(0x7f5527cc19a0, 24) = 0 [pid 10327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10325] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10325] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10327] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10326] <... write resumed>) = 262144 [pid 10326] munmap(0x7f5527cc2000, 262144 [pid 10327] <... open resumed>) = 4 [pid 10326] <... munmap resumed>) = 0 [pid 10327] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10326] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10327] <... futex resumed>) = 1 [pid 10325] <... futex resumed>) = 0 [pid 10326] <... openat resumed>) = 5 [pid 10325] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10325] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10327] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10326] ioctl(5, LOOP_SET_FD, 3 [pid 10327] <... mount resumed>) = 0 [pid 10327] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10327] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10325] <... futex resumed>) = 0 [pid 10325] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10327] <... futex resumed>) = 0 [pid 10327] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10325] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10327] <... open resumed>) = 6 [pid 10327] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10325] <... futex resumed>) = 0 [pid 10325] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10325] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10327] <... futex resumed>) = 1 [pid 10327] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10326] <... ioctl resumed>) = 0 [pid 10326] close(3) = 0 [pid 10326] mkdir("./file1", 0777) = 0 [pid 10326] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10326] ioctl(5, LOOP_CLR_FD) = 0 [pid 10326] close(5) = 0 [pid 10326] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10326] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10327] <... write resumed>) = 262144 [pid 10327] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10325] <... futex resumed>) = 0 [pid 10327] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10325] exit_group(0 [pid 10327] <... futex resumed>) = ? [pid 10326] <... futex resumed>) = ? [pid 10325] <... exit_group resumed>) = ? [pid 10327] +++ exited with 0 +++ [pid 10326] +++ exited with 0 +++ [pid 10325] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10325, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1107/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1107/bus") = 0 [pid 5052] umount2("./1107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1107/binderfs") = 0 [pid 5052] umount2("./1107/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1107/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1107/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1107/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 261.926874][T10326] loop0: detected capacity change from 0 to 512 [ 261.938342][T10326] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1107/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1107") = 0 [pid 5052] mkdir("./1108", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10328 attached , child_tidptr=0x555556d60690) = 10328 [pid 10328] set_robust_list(0x555556d606a0, 24) = 0 [pid 10328] chdir("./1108") = 0 [pid 10328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10328] setpgid(0, 0) = 0 [pid 10328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10328] write(3, "1000", 4) = 4 [pid 10328] close(3) = 0 [pid 10328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10328] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10328] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10328] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10329 attached [pid 10329] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10328] <... clone3 resumed> => {parent_tid=[10329]}, 88) = 10329 [pid 10329] <... rseq resumed>) = 0 [pid 10329] set_robust_list(0x7f55300e29a0, 24 [pid 10328] rt_sigprocmask(SIG_SETMASK, [], [pid 10329] <... set_robust_list resumed>) = 0 [pid 10328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10329] rt_sigprocmask(SIG_SETMASK, [], [pid 10328] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10328] <... futex resumed>) = 0 [pid 10329] memfd_create("syzkaller", 0 [pid 10328] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10329] <... memfd_create resumed>) = 3 [pid 10328] <... mmap resumed>) = 0x7f55300a1000 [pid 10329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10328] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10329] <... mmap resumed>) = 0x7f5527ca1000 [pid 10328] <... mprotect resumed>) = 0 [pid 10329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10330]}, 88) = 10330 [pid 10328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10328] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10328] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10330 attached [pid 10330] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10330] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10330] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10330] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10328] <... futex resumed>) = 0 [pid 10330] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10328] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10328] <... futex resumed>) = 0 [pid 10330] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10328] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10330] <... mount resumed>) = 0 [pid 10330] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10328] <... futex resumed>) = 0 [pid 10330] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10328] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10330] <... futex resumed>) = 0 [pid 10328] <... futex resumed>) = 1 [pid 10328] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10330] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10329] <... write resumed>) = 262144 [pid 10330] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10328] <... futex resumed>) = 0 [pid 10330] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10328] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10330] <... futex resumed>) = 0 [pid 10329] munmap(0x7f5527ca1000, 262144 [pid 10328] <... futex resumed>) = 1 [pid 10330] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10329] <... munmap resumed>) = 0 [pid 10328] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10330] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10330] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10330] <... futex resumed>) = 0 [pid 10330] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10329] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10329] close(3) = 0 [pid 10329] mkdir("./file1", 0777) = 0 [pid 10329] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10329] ioctl(6, LOOP_CLR_FD) = 0 [pid 10329] close(6) = 0 [pid 10329] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10329] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10328] exit_group(0 [pid 10330] <... futex resumed>) = ? [pid 10329] <... futex resumed>) = ? [pid 10328] <... exit_group resumed>) = ? [pid 10329] +++ exited with 0 +++ [pid 10330] +++ exited with 0 +++ [pid 10328] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10328, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1108/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1108/bus") = 0 [pid 5052] umount2("./1108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1108/binderfs") = 0 [pid 5052] umount2("./1108/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1108/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1108/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1108/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1108/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1108") = 0 [pid 5052] mkdir("./1109", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10331 attached , child_tidptr=0x555556d60690) = 10331 [pid 10331] set_robust_list(0x555556d606a0, 24) = 0 [ 262.031873][T10329] loop0: detected capacity change from 0 to 512 [ 262.041959][T10329] ext4: Unknown parameter 'nouser_xattr' [pid 10331] chdir("./1109") = 0 [pid 10331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10331] setpgid(0, 0) = 0 [pid 10331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10331] write(3, "1000", 4) = 4 [pid 10331] close(3) = 0 [pid 10331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10331] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10331] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10331] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10331] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10332 attached => {parent_tid=[10332]}, 88) = 10332 [pid 10332] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10331] rt_sigprocmask(SIG_SETMASK, [], [pid 10332] <... rseq resumed>) = 0 [pid 10332] set_robust_list(0x7f55300e29a0, 24 [pid 10331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10332] <... set_robust_list resumed>) = 0 [pid 10332] rt_sigprocmask(SIG_SETMASK, [], [pid 10331] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10331] <... futex resumed>) = 0 [pid 10332] memfd_create("syzkaller", 0 [pid 10331] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10332] <... memfd_create resumed>) = 3 [pid 10331] <... mmap resumed>) = 0x7f55300a1000 [pid 10332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10331] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10332] <... mmap resumed>) = 0x7f5527ca1000 [pid 10331] <... mprotect resumed>) = 0 [pid 10331] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10333 attached [pid 10333] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10333] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10333] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10332] <... write resumed>) = 262144 [pid 10331] <... clone3 resumed> => {parent_tid=[10333]}, 88) = 10333 [pid 10332] munmap(0x7f5527ca1000, 262144 [pid 10331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10331] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10331] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10332] <... munmap resumed>) = 0 [pid 10333] <... futex resumed>) = 0 [pid 10333] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10332] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10333] <... open resumed>) = 4 [pid 10332] <... openat resumed>) = 5 [pid 10332] ioctl(5, LOOP_SET_FD, 3 [pid 10333] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10331] <... futex resumed>) = 0 [pid 10333] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10331] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10331] <... futex resumed>) = 0 [pid 10333] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10331] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10333] <... mount resumed>) = 0 [pid 10333] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10331] <... futex resumed>) = 0 [pid 10331] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10331] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10333] <... futex resumed>) = 1 [pid 10333] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10333] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10331] <... futex resumed>) = 0 [pid 10333] <... futex resumed>) = 1 [pid 10333] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10331] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10333] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10331] <... futex resumed>) = 0 [pid 10333] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10331] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10333] <... futex resumed>) = 0 [pid 10331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10333] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10332] <... ioctl resumed>) = 0 [pid 10332] close(3) = 0 [pid 10332] mkdir("./file1", 0777) = 0 [pid 10332] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10332] ioctl(5, LOOP_CLR_FD) = 0 [pid 10332] close(5) = 0 [pid 10332] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10332] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10331] exit_group(0 [pid 10332] <... futex resumed>) = ? [pid 10333] <... futex resumed>) = ? [pid 10332] +++ exited with 0 +++ [pid 10331] <... exit_group resumed>) = ? [pid 10333] +++ exited with 0 +++ [pid 10331] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10331, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1109/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1109/bus") = 0 [pid 5052] umount2("./1109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1109/binderfs") = 0 [pid 5052] umount2("./1109/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1109/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1109/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1109/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1109/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1109") = 0 [ 262.142603][T10332] loop0: detected capacity change from 0 to 512 [ 262.152160][T10332] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1110", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10334 attached , child_tidptr=0x555556d60690) = 10334 [pid 10334] set_robust_list(0x555556d606a0, 24) = 0 [pid 10334] chdir("./1110") = 0 [pid 10334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10334] setpgid(0, 0) = 0 [pid 10334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10334] write(3, "1000", 4) = 4 [pid 10334] close(3) = 0 [pid 10334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10334] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10334] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10334] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10335]}, 88) = 10335 [pid 10334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10334] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10334] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10334] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 10335 attached [pid 10335] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10334] <... mprotect resumed>) = 0 [pid 10334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10335] <... rseq resumed>) = 0 [pid 10335] set_robust_list(0x7f55300e29a0, 24 [pid 10334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10335] <... set_robust_list resumed>) = 0 [pid 10335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 10336 attached [pid 10334] <... clone3 resumed> => {parent_tid=[10336]}, 88) = 10336 [pid 10334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10336] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10335] memfd_create("syzkaller", 0 [pid 10334] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10336] <... rseq resumed>) = 0 [pid 10334] <... futex resumed>) = 0 [pid 10334] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10336] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10336] rt_sigprocmask(SIG_SETMASK, [], [pid 10335] <... memfd_create resumed>) = 3 [pid 10336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10336] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10336] <... open resumed>) = 4 [pid 10336] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10334] <... futex resumed>) = 0 [pid 10336] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10334] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10336] <... futex resumed>) = 0 [pid 10334] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10336] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10336] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10334] <... futex resumed>) = 0 [pid 10334] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10334] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10336] <... futex resumed>) = 1 [pid 10336] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10336] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10334] <... futex resumed>) = 0 [pid 10336] <... futex resumed>) = 1 [pid 10334] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10336] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10334] <... futex resumed>) = 0 [pid 10336] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10334] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10336] <... futex resumed>) = 0 [pid 10335] <... write resumed>) = 262144 [pid 10334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10336] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10335] munmap(0x7f5527ca1000, 262144) = 0 [pid 10335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10335] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10335] close(3) = 0 [pid 10335] mkdir("./file1", 0777) = 0 [pid 10335] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10335] ioctl(6, LOOP_CLR_FD) = 0 [pid 10335] close(6) = 0 [pid 10335] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10335] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10334] exit_group(0) = ? [pid 10336] <... futex resumed>) = ? [pid 10336] +++ exited with 0 +++ [pid 10335] <... futex resumed>) = ? [pid 10335] +++ exited with 0 +++ [pid 10334] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10334, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] umount2("./1110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1110/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1110/bus") = 0 [pid 5052] umount2("./1110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1110/binderfs") = 0 [pid 5052] umount2("./1110/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1110/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1110/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1110/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1110/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1110") = 0 [pid 5052] mkdir("./1111", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10337 attached [pid 10337] set_robust_list(0x555556d606a0, 24) = 0 [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10337 [ 262.248535][T10335] loop0: detected capacity change from 0 to 512 [ 262.258147][T10335] ext4: Unknown parameter 'nouser_xattr' [pid 10337] chdir("./1111") = 0 [pid 10337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10337] setpgid(0, 0) = 0 [pid 10337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10337] write(3, "1000", 4) = 4 [pid 10337] close(3) = 0 [pid 10337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10337] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10337] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10337] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10338 attached [pid 10338] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10337] <... clone3 resumed> => {parent_tid=[10338]}, 88) = 10338 [pid 10338] <... rseq resumed>) = 0 [pid 10337] rt_sigprocmask(SIG_SETMASK, [], [pid 10338] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10338] rt_sigprocmask(SIG_SETMASK, [], [pid 10337] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10337] <... futex resumed>) = 0 [pid 10338] memfd_create("syzkaller", 0 [pid 10337] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10338] <... memfd_create resumed>) = 3 [pid 10337] <... mmap resumed>) = 0x7f55300a1000 [pid 10338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10337] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10338] <... mmap resumed>) = 0x7f5527ca1000 [pid 10337] <... mprotect resumed>) = 0 [pid 10337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10339]}, 88) = 10339 ./strace-static-x86_64: Process 10339 attached [pid 10337] rt_sigprocmask(SIG_SETMASK, [], [pid 10339] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10339] <... rseq resumed>) = 0 [pid 10337] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10339] set_robust_list(0x7f55300c19a0, 24 [pid 10337] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10339] <... set_robust_list resumed>) = 0 [pid 10339] rt_sigprocmask(SIG_SETMASK, [], [pid 10338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10339] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10339] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10338] <... write resumed>) = 262144 [pid 10339] <... futex resumed>) = 1 [pid 10337] <... futex resumed>) = 0 [pid 10337] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10337] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10339] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10339] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10337] <... futex resumed>) = 0 [pid 10337] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10337] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10339] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10339] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10337] <... futex resumed>) = 0 [pid 10337] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10337] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10339] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10339] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10337] <... futex resumed>) = 0 [pid 10339] <... futex resumed>) = 1 [pid 10339] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10338] munmap(0x7f5527ca1000, 262144) = 0 [pid 10338] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10338] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10338] close(3) = 0 [pid 10338] mkdir("./file1", 0777) = 0 [pid 10338] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10338] ioctl(6, LOOP_CLR_FD) = 0 [pid 10338] close(6) = 0 [pid 10338] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10338] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10337] exit_group(0 [pid 10339] <... futex resumed>) = ? [pid 10338] <... futex resumed>) = ? [pid 10337] <... exit_group resumed>) = ? [pid 10339] +++ exited with 0 +++ [pid 10338] +++ exited with 0 +++ [pid 10337] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10337, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1111/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1111/bus") = 0 [pid 5052] umount2("./1111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1111/binderfs") = 0 [pid 5052] umount2("./1111/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1111/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1111/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1111/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1111/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 262.342396][T10338] loop0: detected capacity change from 0 to 512 [ 262.352859][T10338] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1111") = 0 [pid 5052] mkdir("./1112", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10340 ./strace-static-x86_64: Process 10340 attached [pid 10340] set_robust_list(0x555556d606a0, 24) = 0 [pid 10340] chdir("./1112") = 0 [pid 10340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10340] setpgid(0, 0) = 0 [pid 10340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10340] write(3, "1000", 4) = 4 [pid 10340] close(3) = 0 [pid 10340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10340] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10340] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10340] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10340] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10340] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10340] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10341 attached [pid 10341] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10340] <... clone3 resumed> => {parent_tid=[10341]}, 88) = 10341 [pid 10341] <... rseq resumed>) = 0 [pid 10340] rt_sigprocmask(SIG_SETMASK, [], [pid 10341] set_robust_list(0x7f55300e29a0, 24 [pid 10340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10341] <... set_robust_list resumed>) = 0 [pid 10340] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10340] <... futex resumed>) = 0 [pid 10340] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10341] memfd_create("syzkaller", 0 [pid 10340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10341] <... memfd_create resumed>) = 3 [pid 10341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10340] <... mmap resumed>) = 0x7f5527ca1000 [pid 10340] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10340] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10340] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10342 attached => {parent_tid=[10342]}, 88) = 10342 [pid 10342] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10340] rt_sigprocmask(SIG_SETMASK, [], [pid 10342] <... rseq resumed>) = 0 [pid 10342] set_robust_list(0x7f5527cc19a0, 24 [pid 10340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10342] <... set_robust_list resumed>) = 0 [pid 10341] <... write resumed>) = 262144 [pid 10340] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10342] rt_sigprocmask(SIG_SETMASK, [], [pid 10340] <... futex resumed>) = 0 [pid 10342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10342] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10340] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10342] <... open resumed>) = 4 [pid 10341] munmap(0x7f5527cc2000, 262144 [pid 10342] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10340] <... futex resumed>) = 0 [pid 10342] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10340] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10342] <... futex resumed>) = 0 [pid 10340] <... futex resumed>) = 1 [pid 10342] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10341] <... munmap resumed>) = 0 [pid 10340] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10342] <... mount resumed>) = 0 [pid 10342] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10341] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10342] <... futex resumed>) = 1 [pid 10342] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10341] <... openat resumed>) = 5 [pid 10340] <... futex resumed>) = 0 [pid 10340] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10342] <... futex resumed>) = 0 [pid 10340] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10342] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10341] ioctl(5, LOOP_SET_FD, 3 [pid 10342] <... open resumed>) = 6 [pid 10342] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10342] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10340] <... futex resumed>) = 0 [pid 10340] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10342] <... futex resumed>) = 0 [pid 10340] <... futex resumed>) = 1 [pid 10342] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10340] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10341] <... ioctl resumed>) = 0 [pid 10341] close(3) = 0 [pid 10341] mkdir("./file1", 0777) = 0 [pid 10341] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10342] <... write resumed>) = 262144 [pid 10342] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10342] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10341] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10340] <... futex resumed>) = 0 [pid 10341] ioctl(5, LOOP_CLR_FD) = 0 [pid 10341] close(5) = 0 [pid 10341] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10341] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10340] exit_group(0 [pid 10342] <... futex resumed>) = ? [pid 10340] <... exit_group resumed>) = ? [pid 10342] +++ exited with 0 +++ [pid 10341] <... futex resumed>) = ? [pid 10341] +++ exited with 0 +++ [pid 10340] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10340, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1112/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1112/bus") = 0 [pid 5052] umount2("./1112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1112/binderfs") = 0 [pid 5052] umount2("./1112/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1112/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1112/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1112/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1112/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1112") = 0 [pid 5052] mkdir("./1113", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10343 attached , child_tidptr=0x555556d60690) = 10343 [pid 10343] set_robust_list(0x555556d606a0, 24) = 0 [pid 10343] chdir("./1113") = 0 [pid 10343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10343] setpgid(0, 0) = 0 [pid 10343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10343] write(3, "1000", 4) = 4 [pid 10343] close(3) = 0 [pid 10343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10343] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10343] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10343] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10344 attached => {parent_tid=[10344]}, 88) = 10344 [pid 10343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10343] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 262.448665][T10341] loop0: detected capacity change from 0 to 512 [ 262.460849][T10341] ext4: Unknown parameter 'nouser_xattr' [pid 10343] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10344] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10343] <... futex resumed>) = 0 [pid 10344] <... rseq resumed>) = 0 [pid 10343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10344] set_robust_list(0x7f55300e29a0, 24 [pid 10343] <... mmap resumed>) = 0x7f55300a1000 [pid 10344] <... set_robust_list resumed>) = 0 [pid 10343] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10344] rt_sigprocmask(SIG_SETMASK, [], [pid 10343] <... mprotect resumed>) = 0 [pid 10344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10344] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 10345 attached [pid 10344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10345] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10343] <... clone3 resumed> => {parent_tid=[10345]}, 88) = 10345 [pid 10345] <... rseq resumed>) = 0 [pid 10344] <... mmap resumed>) = 0x7f5527ca1000 [pid 10345] set_robust_list(0x7f55300c19a0, 24 [pid 10343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10343] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10343] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10345] <... set_robust_list resumed>) = 0 [pid 10345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10345] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10345] <... open resumed>) = 4 [pid 10345] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10344] <... write resumed>) = 262144 [pid 10345] <... futex resumed>) = 1 [pid 10343] <... futex resumed>) = 0 [pid 10345] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10344] munmap(0x7f5527ca1000, 262144 [pid 10343] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10343] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10344] <... munmap resumed>) = 0 [pid 10345] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10344] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10345] <... mount resumed>) = 0 [pid 10344] <... openat resumed>) = 5 [pid 10344] ioctl(5, LOOP_SET_FD, 3 [pid 10345] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10343] <... futex resumed>) = 0 [pid 10345] <... futex resumed>) = 1 [pid 10343] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10345] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10343] <... futex resumed>) = 0 [pid 10345] <... open resumed>) = 6 [pid 10343] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10345] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10345] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10343] <... futex resumed>) = 0 [pid 10345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10343] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10345] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10343] <... futex resumed>) = 0 [pid 10343] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10344] <... ioctl resumed>) = 0 [pid 10344] close(3) = 0 [pid 10344] mkdir("./file1", 0777 [pid 10345] <... write resumed>) = 262144 [pid 10345] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10345] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10344] <... mkdir resumed>) = 0 [pid 10343] <... futex resumed>) = 0 [pid 10344] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10344] ioctl(5, LOOP_CLR_FD) = 0 [pid 10344] close(5) = 0 [pid 10344] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10343] exit_group(0) = ? [pid 10345] <... futex resumed>) = ? [pid 10345] +++ exited with 0 +++ [pid 10344] <... futex resumed>) = ? [pid 10344] +++ exited with 0 +++ [pid 10343] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10343, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1113/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1113/bus") = 0 [pid 5052] umount2("./1113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1113/binderfs") = 0 [pid 5052] umount2("./1113/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1113/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1113/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1113/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1113/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1113") = 0 [pid 5052] mkdir("./1114", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10346 attached , child_tidptr=0x555556d60690) = 10346 [pid 10346] set_robust_list(0x555556d606a0, 24) = 0 [pid 10346] chdir("./1114") = 0 [pid 10346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10346] setpgid(0, 0) = 0 [pid 10346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10346] write(3, "1000", 4) = 4 [pid 10346] close(3) = 0 [pid 10346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10346] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10346] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10346] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [ 262.535202][T10344] loop0: detected capacity change from 0 to 512 [ 262.560078][T10344] ext4: Unknown parameter 'nouser_xattr' [pid 10346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10347 attached => {parent_tid=[10347]}, 88) = 10347 [pid 10347] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10346] rt_sigprocmask(SIG_SETMASK, [], [pid 10347] set_robust_list(0x7f55300e29a0, 24 [pid 10346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10346] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10347] <... set_robust_list resumed>) = 0 [pid 10346] <... futex resumed>) = 0 [pid 10346] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10347] rt_sigprocmask(SIG_SETMASK, [], [pid 10346] <... futex resumed>) = 0 [pid 10347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10347] memfd_create("syzkaller", 0 [pid 10346] <... mmap resumed>) = 0x7f55300a1000 [pid 10346] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10347] <... memfd_create resumed>) = 3 [pid 10346] <... mprotect resumed>) = 0 [pid 10347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10348]}, 88) = 10348 [pid 10346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10346] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10346] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10348 attached [pid 10348] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10348] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10348] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10347] munmap(0x7f5527ca1000, 262144) = 0 [pid 10348] <... open resumed>) = 4 [pid 10347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10347] ioctl(5, LOOP_SET_FD, 3 [pid 10348] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10346] <... futex resumed>) = 0 [pid 10348] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10346] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10348] <... mount resumed>) = 0 [pid 10348] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10346] <... futex resumed>) = 0 [pid 10348] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10347] <... ioctl resumed>) = 0 [pid 10346] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10347] close(3 [pid 10346] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10347] <... close resumed>) = 0 [pid 10346] <... futex resumed>) = 1 [pid 10348] <... futex resumed>) = 0 [pid 10346] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10348] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10347] mkdir("./file1", 0777 [pid 10348] <... open resumed>) = 3 [pid 10348] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10346] <... futex resumed>) = 0 [pid 10348] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10346] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10346] <... futex resumed>) = 0 [pid 10346] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10347] <... mkdir resumed>) = 0 [pid 10347] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10347] ioctl(5, LOOP_CLR_FD) = 0 [pid 10347] close(5) = 0 [pid 10347] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10347] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10348] <... write resumed>) = 262144 [pid 10348] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10346] <... futex resumed>) = 0 [pid 10346] exit_group(0 [pid 10347] <... futex resumed>) = ? [pid 10346] <... exit_group resumed>) = ? [pid 10347] +++ exited with 0 +++ [pid 10348] <... futex resumed>) = ? [pid 10348] +++ exited with 0 +++ [pid 10346] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10346, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1114/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1114/bus") = 0 [pid 5052] umount2("./1114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1114/binderfs") = 0 [pid 5052] umount2("./1114/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1114/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1114/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1114/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [ 262.637222][T10347] loop0: detected capacity change from 0 to 512 [ 262.651732][T10347] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(4) = 0 [pid 5052] rmdir("./1114/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1114") = 0 [pid 5052] mkdir("./1115", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10349 attached , child_tidptr=0x555556d60690) = 10349 [pid 10349] set_robust_list(0x555556d606a0, 24) = 0 [pid 10349] chdir("./1115") = 0 [pid 10349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10349] setpgid(0, 0) = 0 [pid 10349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10349] write(3, "1000", 4) = 4 [pid 10349] close(3) = 0 [pid 10349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10349] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10349] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10349] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10349] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10349] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10350 attached => {parent_tid=[10350]}, 88) = 10350 [pid 10349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10349] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10349] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10349] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10350] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10350] <... rseq resumed>) = 0 [pid 10349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10350] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10350] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 10351 attached [pid 10350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10351] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10350] <... mmap resumed>) = 0x7f5527ca1000 [pid 10349] <... clone3 resumed> => {parent_tid=[10351]}, 88) = 10351 [pid 10351] <... rseq resumed>) = 0 [pid 10349] rt_sigprocmask(SIG_SETMASK, [], [pid 10351] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10351] rt_sigprocmask(SIG_SETMASK, [], [pid 10349] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10349] <... futex resumed>) = 0 [pid 10351] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10349] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10351] <... open resumed>) = 4 [pid 10350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10351] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10349] <... futex resumed>) = 0 [pid 10349] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10349] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10351] <... futex resumed>) = 1 [pid 10351] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10351] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10349] <... futex resumed>) = 0 [pid 10351] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10349] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10350] <... write resumed>) = 262144 [pid 10351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10350] munmap(0x7f5527ca1000, 262144 [pid 10349] <... futex resumed>) = 0 [pid 10351] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10349] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10350] <... munmap resumed>) = 0 [pid 10350] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10351] <... open resumed>) = 5 [pid 10350] <... openat resumed>) = 6 [pid 10350] ioctl(6, LOOP_SET_FD, 3 [pid 10351] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10351] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10349] <... futex resumed>) = 0 [pid 10349] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10351] <... futex resumed>) = 0 [pid 10349] <... futex resumed>) = 1 [pid 10351] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10349] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10350] <... ioctl resumed>) = 0 [pid 10350] close(3) = 0 [pid 10350] mkdir("./file1", 0777) = 0 [pid 10350] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10351] <... write resumed>) = 262144 [pid 10351] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10351] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10349] <... futex resumed>) = 0 [pid 10350] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10350] ioctl(6, LOOP_CLR_FD) = 0 [pid 10350] close(6) = 0 [pid 10350] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10349] exit_group(0 [pid 10350] <... futex resumed>) = 0 [pid 10350] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 10349] <... exit_group resumed>) = ? [pid 10351] <... futex resumed>) = ? [pid 10350] +++ exited with 0 +++ [pid 10351] +++ exited with 0 +++ [pid 10349] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10349, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1115/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1115/bus") = 0 [pid 5052] umount2("./1115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1115/binderfs") = 0 [pid 5052] umount2("./1115/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1115/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1115/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1115/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1115/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [ 262.759286][T10350] loop0: detected capacity change from 0 to 512 [ 262.773311][T10350] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(3) = 0 [pid 5052] rmdir("./1115") = 0 [pid 5052] mkdir("./1116", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10352 attached , child_tidptr=0x555556d60690) = 10352 [pid 10352] set_robust_list(0x555556d606a0, 24) = 0 [pid 10352] chdir("./1116") = 0 [pid 10352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10352] setpgid(0, 0) = 0 [pid 10352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10352] write(3, "1000", 4) = 4 [pid 10352] close(3) = 0 [pid 10352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10352] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10352] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10352] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10353]}, 88) = 10353 [pid 10352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10352] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10352] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10353 attached [pid 10353] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10352] <... futex resumed>) = 0 [pid 10353] set_robust_list(0x7f55300e29a0, 24 [pid 10352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10353] <... set_robust_list resumed>) = 0 [pid 10353] rt_sigprocmask(SIG_SETMASK, [], [pid 10352] <... mmap resumed>) = 0x7f55300a1000 [pid 10353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10352] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10353] memfd_create("syzkaller", 0 [pid 10352] <... mprotect resumed>) = 0 [pid 10353] <... memfd_create resumed>) = 3 [pid 10352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10353] <... mmap resumed>) = 0x7f5527ca1000 ./strace-static-x86_64: Process 10354 attached [pid 10352] <... clone3 resumed> => {parent_tid=[10354]}, 88) = 10354 [pid 10354] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10352] rt_sigprocmask(SIG_SETMASK, [], [pid 10354] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10354] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10352] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10354] <... futex resumed>) = 0 [pid 10352] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10354] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10354] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10353] <... write resumed>) = 262144 [pid 10354] <... futex resumed>) = 1 [pid 10353] munmap(0x7f5527ca1000, 262144 [pid 10352] <... futex resumed>) = 0 [pid 10354] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10352] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10352] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10354] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10353] <... munmap resumed>) = 0 [pid 10353] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10354] <... mount resumed>) = 0 [pid 10353] ioctl(5, LOOP_SET_FD, 3 [pid 10354] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10352] <... futex resumed>) = 0 [pid 10354] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10352] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10354] <... futex resumed>) = 0 [pid 10352] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10354] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10354] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10352] <... futex resumed>) = 0 [pid 10354] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10352] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10352] <... futex resumed>) = 0 [pid 10354] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10352] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10353] <... ioctl resumed>) = 0 [pid 10353] close(3) = 0 [pid 10353] mkdir("./file1", 0777) = 0 [pid 10353] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10353] ioctl(5, LOOP_CLR_FD) = 0 [pid 10354] <... write resumed>) = 262144 [pid 10353] close(5 [pid 10354] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10352] <... futex resumed>) = 0 [pid 10354] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10353] <... close resumed>) = 0 [pid 10353] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10353] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10352] exit_group(0 [pid 10354] <... futex resumed>) = ? [pid 10352] <... exit_group resumed>) = ? [pid 10353] <... futex resumed>) = ? [pid 10354] +++ exited with 0 +++ [pid 10353] +++ exited with 0 +++ [pid 10352] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10352, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1116/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1116/bus") = 0 [ 262.879816][T10353] loop0: detected capacity change from 0 to 512 [ 262.892261][T10353] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1116/binderfs") = 0 [pid 5052] umount2("./1116/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1116/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1116/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1116/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1116/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1116") = 0 [pid 5052] mkdir("./1117", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10355 attached , child_tidptr=0x555556d60690) = 10355 [pid 10355] set_robust_list(0x555556d606a0, 24) = 0 [pid 10355] chdir("./1117") = 0 [pid 10355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10355] setpgid(0, 0) = 0 [pid 10355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10355] write(3, "1000", 4) = 4 [pid 10355] close(3) = 0 [pid 10355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10355] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10355] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10355] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10355] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10355] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10356 attached => {parent_tid=[10356]}, 88) = 10356 [pid 10355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10355] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10355] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10355] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10355] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10356] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10355] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10356] <... rseq resumed>) = 0 [pid 10355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10356] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10356] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10357 attached NULL, 8) = 0 [pid 10355] <... clone3 resumed> => {parent_tid=[10357]}, 88) = 10357 [pid 10357] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10356] memfd_create("syzkaller", 0 [pid 10355] rt_sigprocmask(SIG_SETMASK, [], [pid 10357] <... rseq resumed>) = 0 [pid 10355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10357] set_robust_list(0x7f55300c19a0, 24 [pid 10356] <... memfd_create resumed>) = 3 [pid 10355] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10357] <... set_robust_list resumed>) = 0 [pid 10355] <... futex resumed>) = 0 [pid 10357] rt_sigprocmask(SIG_SETMASK, [], [pid 10355] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10357] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10357] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10356] <... mmap resumed>) = 0x7f5527ca1000 [pid 10355] <... futex resumed>) = 0 [pid 10357] <... futex resumed>) = 1 [pid 10355] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10357] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10355] <... futex resumed>) = 0 [pid 10357] <... mount resumed>) = 0 [pid 10355] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10357] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10355] <... futex resumed>) = 0 [pid 10357] <... futex resumed>) = 1 [pid 10355] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10357] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10355] <... futex resumed>) = 0 [pid 10355] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10357] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10355] <... futex resumed>) = 0 [pid 10355] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10357] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10355] <... futex resumed>) = 0 [pid 10357] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10355] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10357] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10356] <... write resumed>) = 262144 [pid 10355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10357] <... futex resumed>) = 0 [pid 10357] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10356] munmap(0x7f5527ca1000, 262144) = 0 [pid 10356] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10356] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10356] close(3) = 0 [pid 10356] mkdir("./file1", 0777) = 0 [pid 10356] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10356] ioctl(6, LOOP_CLR_FD) = 0 [pid 10356] close(6) = 0 [pid 10356] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10355] exit_group(0 [pid 10356] <... futex resumed>) = 0 [pid 10357] <... futex resumed>) = ? [pid 10355] <... exit_group resumed>) = ? [pid 10357] +++ exited with 0 +++ [pid 10356] +++ exited with 0 +++ [pid 10355] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10355, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1117/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1117/bus") = 0 [pid 5052] umount2("./1117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1117/binderfs") = 0 [pid 5052] umount2("./1117/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1117/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1117/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1117/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1117/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1117") = 0 [pid 5052] mkdir("./1118", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 263.006404][T10356] loop0: detected capacity change from 0 to 512 [ 263.015802][T10356] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10358 attached , child_tidptr=0x555556d60690) = 10358 [pid 10358] set_robust_list(0x555556d606a0, 24) = 0 [pid 10358] chdir("./1118") = 0 [pid 10358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10358] setpgid(0, 0) = 0 [pid 10358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10358] write(3, "1000", 4) = 4 [pid 10358] close(3) = 0 [pid 10358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10358] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10358] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10358] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10359 attached => {parent_tid=[10359]}, 88) = 10359 [pid 10358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10358] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10359] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10358] <... futex resumed>) = 0 [pid 10358] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10359] <... rseq resumed>) = 0 [pid 10359] set_robust_list(0x7f55300e29a0, 24 [pid 10358] <... mmap resumed>) = 0x7f55300a1000 [pid 10359] <... set_robust_list resumed>) = 0 [pid 10359] rt_sigprocmask(SIG_SETMASK, [], [pid 10358] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10359] memfd_create("syzkaller", 0 [pid 10358] <... mprotect resumed>) = 0 [pid 10359] <... memfd_create resumed>) = 3 [pid 10358] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10358] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10360]}, 88) = 10360 [pid 10358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10358] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10360 attached [pid 10359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10360] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10358] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10360] <... rseq resumed>) = 0 [pid 10359] <... write resumed>) = 262144 [pid 10360] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10359] munmap(0x7f5527ca1000, 262144 [pid 10360] rt_sigprocmask(SIG_SETMASK, [], [pid 10359] <... munmap resumed>) = 0 [pid 10360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10360] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10360] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10360] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10358] <... futex resumed>) = 0 [pid 10359] ioctl(5, LOOP_SET_FD, 3 [pid 10358] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10358] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10360] <... futex resumed>) = 0 [pid 10359] <... ioctl resumed>) = 0 [pid 10360] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10360] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10359] close(3 [pid 10360] <... futex resumed>) = 1 [pid 10359] <... close resumed>) = 0 [pid 10360] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10359] mkdir("./file1", 0777 [pid 10358] <... futex resumed>) = 0 [pid 10358] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10360] <... futex resumed>) = 0 [pid 10358] <... futex resumed>) = 1 [pid 10360] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10358] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10360] <... open resumed>) = 3 [pid 10360] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10358] <... futex resumed>) = 0 [pid 10360] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10358] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10358] <... futex resumed>) = 0 [pid 10360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10358] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10359] <... mkdir resumed>) = 0 [pid 10359] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10359] ioctl(5, LOOP_CLR_FD) = 0 [pid 10359] close(5) = 0 [pid 10359] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10359] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10360] <... write resumed>) = 262144 [pid 10360] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10358] <... futex resumed>) = 0 [pid 10360] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10358] exit_group(0 [pid 10360] <... futex resumed>) = ? [pid 10358] <... exit_group resumed>) = ? [pid 10360] +++ exited with 0 +++ [pid 10359] <... futex resumed>) = ? [pid 10359] +++ exited with 0 +++ [pid 10358] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10358, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1118/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1118/bus") = 0 [pid 5052] umount2("./1118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1118/binderfs") = 0 [pid 5052] umount2("./1118/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1118/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 263.110550][T10359] loop0: detected capacity change from 0 to 512 [ 263.126097][T10359] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1118/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1118/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1118/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1118") = 0 [pid 5052] mkdir("./1119", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10361 attached , child_tidptr=0x555556d60690) = 10361 [pid 10361] set_robust_list(0x555556d606a0, 24) = 0 [pid 10361] chdir("./1119") = 0 [pid 10361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10361] setpgid(0, 0) = 0 [pid 10361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10361] write(3, "1000", 4) = 4 [pid 10361] close(3) = 0 [pid 10361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10361] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10361] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10361] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10362 attached => {parent_tid=[10362]}, 88) = 10362 [pid 10362] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10361] rt_sigprocmask(SIG_SETMASK, [], [pid 10362] <... rseq resumed>) = 0 [pid 10361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10362] set_robust_list(0x7f55300e29a0, 24 [pid 10361] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10362] <... set_robust_list resumed>) = 0 [pid 10362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10362] memfd_create("syzkaller", 0) = 3 [pid 10361] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10362] <... mmap resumed>) = 0x7f5527cc2000 [pid 10361] <... mmap resumed>) = 0x7f5527ca1000 [pid 10361] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10363 attached [pid 10363] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053) = 0 [pid 10361] <... clone3 resumed> => {parent_tid=[10363]}, 88) = 10363 [pid 10361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10362] <... write resumed>) = 262144 [pid 10363] set_robust_list(0x7f5527cc19a0, 24 [pid 10361] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10361] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10363] <... set_robust_list resumed>) = 0 [pid 10362] munmap(0x7f5527cc2000, 262144 [pid 10363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10363] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10362] <... munmap resumed>) = 0 [pid 10362] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10362] ioctl(5, LOOP_SET_FD, 3 [pid 10363] <... open resumed>) = 4 [pid 10363] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10363] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10361] <... futex resumed>) = 0 [pid 10361] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10363] <... futex resumed>) = 0 [pid 10361] <... futex resumed>) = 1 [pid 10363] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10361] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10363] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10361] <... futex resumed>) = 0 [pid 10361] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10361] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10363] <... futex resumed>) = 1 [pid 10362] <... ioctl resumed>) = 0 [pid 10363] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10362] close(3 [pid 10363] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10361] <... futex resumed>) = 0 [pid 10361] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10362] <... close resumed>) = 0 [pid 10362] mkdir("./file1", 0777 [pid 10363] <... futex resumed>) = 1 [pid 10361] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10363] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10362] <... mkdir resumed>) = 0 [pid 10362] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10362] ioctl(5, LOOP_CLR_FD) = 0 [pid 10362] close(5) = 0 [pid 10362] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10362] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10363] <... write resumed>) = 262144 [pid 10363] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10361] <... futex resumed>) = 0 [pid 10363] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10361] exit_group(0 [pid 10363] <... futex resumed>) = ? [pid 10362] <... futex resumed>) = ? [pid 10361] <... exit_group resumed>) = ? [pid 10363] +++ exited with 0 +++ [pid 10362] +++ exited with 0 +++ [pid 10361] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10361, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1119/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1119/bus") = 0 [pid 5052] umount2("./1119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1119/binderfs") = 0 [pid 5052] umount2("./1119/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1119/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1119/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1119/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1119/file1") = 0 [ 263.217324][T10362] loop0: detected capacity change from 0 to 512 [ 263.229028][T10362] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1119") = 0 [pid 5052] mkdir("./1120", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10364 attached , child_tidptr=0x555556d60690) = 10364 [pid 10364] set_robust_list(0x555556d606a0, 24) = 0 [pid 10364] chdir("./1120") = 0 [pid 10364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10364] setpgid(0, 0) = 0 [pid 10364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10364] write(3, "1000", 4) = 4 [pid 10364] close(3) = 0 [pid 10364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10364] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10364] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10364] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10364] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10365 attached => {parent_tid=[10365]}, 88) = 10365 [pid 10365] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10364] rt_sigprocmask(SIG_SETMASK, [], [pid 10365] <... rseq resumed>) = 0 [pid 10364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10364] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10365] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10364] <... futex resumed>) = 0 [pid 10365] rt_sigprocmask(SIG_SETMASK, [], [pid 10364] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10365] memfd_create("syzkaller", 0 [pid 10364] <... mmap resumed>) = 0x7f55300a1000 [pid 10365] <... memfd_create resumed>) = 3 [pid 10364] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10364] <... mprotect resumed>) = 0 [pid 10365] <... mmap resumed>) = 0x7f5527ca1000 [pid 10364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10366 attached => {parent_tid=[10366]}, 88) = 10366 [pid 10364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10364] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10366] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10366] <... rseq resumed>) = 0 [pid 10364] <... futex resumed>) = 0 [pid 10364] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10366] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10366] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10366] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10365] <... write resumed>) = 262144 [pid 10365] munmap(0x7f5527ca1000, 262144 [pid 10364] <... futex resumed>) = 0 [pid 10364] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10366] <... futex resumed>) = 1 [pid 10364] <... futex resumed>) = 0 [pid 10364] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10365] <... munmap resumed>) = 0 [pid 10366] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10365] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10366] <... mount resumed>) = 0 [pid 10365] <... openat resumed>) = 5 [pid 10366] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10364] <... futex resumed>) = 0 [pid 10366] <... futex resumed>) = 1 [pid 10364] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10366] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10364] <... futex resumed>) = 0 [pid 10366] <... open resumed>) = 6 [pid 10365] ioctl(5, LOOP_SET_FD, 3 [pid 10364] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10366] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10364] <... futex resumed>) = 0 [pid 10364] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10366] <... futex resumed>) = 1 [pid 10364] <... futex resumed>) = 0 [pid 10366] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10364] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10366] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10366] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10364] <... futex resumed>) = 0 [pid 10366] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10365] <... ioctl resumed>) = 0 [pid 10365] close(3) = 0 [pid 10365] mkdir("./file1", 0777) = 0 [pid 10365] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10365] ioctl(5, LOOP_CLR_FD) = 0 [pid 10365] close(5) = 0 [pid 10365] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10365] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10364] exit_group(0 [pid 10366] <... futex resumed>) = ? [pid 10365] <... futex resumed>) = ? [pid 10364] <... exit_group resumed>) = ? [pid 10366] +++ exited with 0 +++ [pid 10365] +++ exited with 0 +++ [pid 10364] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10364, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1120/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1120/bus") = 0 [pid 5052] umount2("./1120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1120/binderfs") = 0 [pid 5052] umount2("./1120/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1120/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1120/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1120/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1120/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1120") = 0 [pid 5052] mkdir("./1121", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 263.340467][T10365] loop0: detected capacity change from 0 to 512 [ 263.349895][T10365] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10367 attached [pid 10367] set_robust_list(0x555556d606a0, 24) = 0 [pid 10367] chdir("./1121") = 0 [pid 10367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10367] setpgid(0, 0) = 0 [pid 10367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10367] write(3, "1000", 4) = 4 [pid 10367] close(3) = 0 [pid 10367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10367] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10367] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10367] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10368 attached [pid 10368] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10367] <... clone3 resumed> => {parent_tid=[10368]}, 88) = 10368 [pid 10368] <... rseq resumed>) = 0 [pid 10367] rt_sigprocmask(SIG_SETMASK, [], [pid 10368] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10368] rt_sigprocmask(SIG_SETMASK, [], [pid 10367] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10368] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10367 [pid 10368] memfd_create("syzkaller", 0 [pid 10367] <... futex resumed>) = 0 [pid 10367] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10368] <... memfd_create resumed>) = 3 [pid 10367] <... mmap resumed>) = 0x7f55300a1000 [pid 10368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10367] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10368] <... mmap resumed>) = 0x7f5527ca1000 [pid 10367] <... mprotect resumed>) = 0 [pid 10368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10369]}, 88) = 10369 [pid 10367] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10369 attached NULL, 8) = 0 [pid 10369] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10367] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10369] <... rseq resumed>) = 0 [pid 10367] <... futex resumed>) = 0 [pid 10369] set_robust_list(0x7f55300c19a0, 24 [pid 10367] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10369] <... set_robust_list resumed>) = 0 [pid 10369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10369] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10368] <... write resumed>) = 262144 [pid 10369] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10369] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10367] <... futex resumed>) = 0 [pid 10367] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10369] <... futex resumed>) = 0 [pid 10367] <... futex resumed>) = 1 [pid 10369] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10367] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10369] <... mount resumed>) = 0 [pid 10369] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10367] <... futex resumed>) = 0 [pid 10367] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10369] <... futex resumed>) = 1 [pid 10367] <... futex resumed>) = 0 [pid 10369] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10367] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10369] <... open resumed>) = 5 [pid 10368] munmap(0x7f5527ca1000, 262144 [pid 10369] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10368] <... munmap resumed>) = 0 [pid 10369] <... futex resumed>) = 1 [pid 10367] <... futex resumed>) = 0 [pid 10369] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10367] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10367] <... futex resumed>) = 0 [pid 10369] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10367] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10369] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10368] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10369] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10367] <... futex resumed>) = 0 [pid 10369] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10368] <... openat resumed>) = 6 [pid 10368] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10368] close(3) = 0 [pid 10368] mkdir("./file1", 0777) = 0 [pid 10368] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10368] ioctl(6, LOOP_CLR_FD) = 0 [pid 10368] close(6) = 0 [pid 10368] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10367] exit_group(0) = ? [pid 10369] <... futex resumed>) = ? [pid 10369] +++ exited with 0 +++ [pid 10368] <... futex resumed>) = ? [pid 10368] +++ exited with 0 +++ [pid 10367] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10367, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1121/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1121/bus") = 0 [pid 5052] umount2("./1121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1121/binderfs") = 0 [pid 5052] umount2("./1121/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1121/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1121/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1121/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1121/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1121") = 0 [pid 5052] mkdir("./1122", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 263.453590][T10368] loop0: detected capacity change from 0 to 512 [ 263.465375][T10368] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10370 attached , child_tidptr=0x555556d60690) = 10370 [pid 10370] set_robust_list(0x555556d606a0, 24) = 0 [pid 10370] chdir("./1122") = 0 [pid 10370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10370] setpgid(0, 0) = 0 [pid 10370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10370] write(3, "1000", 4) = 4 [pid 10370] close(3) = 0 [pid 10370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10370] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10370] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10370] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10371]}, 88) = 10371 [pid 10370] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10371 attached NULL, 8) = 0 [pid 10371] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10370] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10371] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10370] <... futex resumed>) = 0 [pid 10371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10370] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10371] memfd_create("syzkaller", 0 [pid 10370] <... futex resumed>) = 0 [pid 10370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10370] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10372 attached [pid 10372] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10372] set_robust_list(0x7f55300c19a0, 24 [pid 10370] <... clone3 resumed> => {parent_tid=[10372]}, 88) = 10372 [pid 10371] <... memfd_create resumed>) = 3 [pid 10371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10372] <... set_robust_list resumed>) = 0 [pid 10371] <... mmap resumed>) = 0x7f5527ca1000 [pid 10370] rt_sigprocmask(SIG_SETMASK, [], [pid 10372] rt_sigprocmask(SIG_SETMASK, [], [pid 10370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10372] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10370] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10370] <... futex resumed>) = 0 [pid 10372] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10370] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10372] <... open resumed>) = 4 [pid 10372] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10370] <... futex resumed>) = 0 [pid 10370] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10372] <... futex resumed>) = 1 [pid 10370] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10372] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10371] <... write resumed>) = 262144 [pid 10372] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10370] <... futex resumed>) = 0 [pid 10372] <... futex resumed>) = 1 [pid 10370] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10372] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10370] <... futex resumed>) = 0 [pid 10372] <... open resumed>) = 5 [pid 10370] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10372] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10370] <... futex resumed>) = 0 [pid 10370] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10372] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10370] <... futex resumed>) = 0 [pid 10372] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10370] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10372] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10372] <... futex resumed>) = 0 [pid 10372] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10371] munmap(0x7f5527ca1000, 262144) = 0 [pid 10371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10371] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10371] close(3) = 0 [pid 10371] mkdir("./file1", 0777) = 0 [pid 10371] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10371] ioctl(6, LOOP_CLR_FD) = 0 [pid 10371] close(6) = 0 [pid 10371] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10371] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10370] exit_group(0 [pid 10372] <... futex resumed>) = ? [pid 10371] <... futex resumed>) = ? [pid 10370] <... exit_group resumed>) = ? [pid 10372] +++ exited with 0 +++ [pid 10371] +++ exited with 0 +++ [pid 10370] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10370, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1122/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1122/bus") = 0 [pid 5052] umount2("./1122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1122/binderfs") = 0 [pid 5052] umount2("./1122/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1122/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1122/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1122/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1122/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1122") = 0 [pid 5052] mkdir("./1123", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10373 attached , child_tidptr=0x555556d60690) = 10373 [pid 10373] set_robust_list(0x555556d606a0, 24) = 0 [pid 10373] chdir("./1123") = 0 [pid 10373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10373] setpgid(0, 0) = 0 [pid 10373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10373] write(3, "1000", 4) = 4 [pid 10373] close(3) = 0 [pid 10373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10373] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10373] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10373] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10373] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10374 attached [pid 10374] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10373] <... clone3 resumed> => {parent_tid=[10374]}, 88) = 10374 [pid 10374] set_robust_list(0x7f55300e29a0, 24 [pid 10373] rt_sigprocmask(SIG_SETMASK, [], [pid 10374] <... set_robust_list resumed>) = 0 [pid 10374] rt_sigprocmask(SIG_SETMASK, [], [pid 10373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10373] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10374] memfd_create("syzkaller", 0 [pid 10373] <... futex resumed>) = 0 [pid 10373] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10374] <... memfd_create resumed>) = 3 [pid 10373] <... mmap resumed>) = 0x7f55300a1000 [pid 10373] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10373] <... mprotect resumed>) = 0 [pid 10374] <... mmap resumed>) = 0x7f5527ca1000 [pid 10373] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10373] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10375]}, 88) = 10375 [pid 10373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10373] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 263.562294][T10371] loop0: detected capacity change from 0 to 512 [ 263.571633][T10371] ext4: Unknown parameter 'nouser_xattr' [pid 10373] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10375 attached [pid 10374] <... write resumed>) = 262144 [pid 10374] munmap(0x7f5527ca1000, 262144) = 0 [pid 10374] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10375] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10374] <... openat resumed>) = 4 [pid 10374] ioctl(4, LOOP_SET_FD, 3 [pid 10375] <... rseq resumed>) = 0 [pid 10375] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10375] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10374] <... ioctl resumed>) = 0 [pid 10374] close(3) = 0 [pid 10374] mkdir("./file1", 0777 [pid 10375] <... open resumed>) = 5 [pid 10375] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10375] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10373] <... futex resumed>) = 0 [pid 10373] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10375] <... futex resumed>) = 0 [pid 10375] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10373] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10375] <... mount resumed>) = 0 [pid 10375] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10373] <... futex resumed>) = 0 [pid 10375] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10373] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10373] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10374] <... mkdir resumed>) = 0 [pid 10374] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10375] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10375] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10373] <... futex resumed>) = 0 [pid 10373] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10373] <... futex resumed>) = 0 [pid 10373] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10374] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10374] ioctl(4, LOOP_CLR_FD) = 0 [pid 10374] close(4) = 0 [pid 10374] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10374] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10375] <... write resumed>) = 262144 [pid 10375] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10373] <... futex resumed>) = 0 [pid 10373] exit_group(0) = ? [pid 10374] <... futex resumed>) = ? [pid 10374] +++ exited with 0 +++ [pid 10375] <... futex resumed>) = ? [ 263.626166][T10374] loop0: detected capacity change from 0 to 512 [ 263.639224][T10374] ext4: Unknown parameter 'nouser_xattr' [pid 10375] +++ exited with 0 +++ [pid 10373] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10373, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1123/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1123/bus") = 0 [pid 5052] umount2("./1123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1123/binderfs") = 0 [pid 5052] umount2("./1123/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1123/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1123/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1123/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1123/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1123") = 0 [pid 5052] mkdir("./1124", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10376 attached , child_tidptr=0x555556d60690) = 10376 [pid 10376] set_robust_list(0x555556d606a0, 24) = 0 [pid 10376] chdir("./1124") = 0 [pid 10376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10376] setpgid(0, 0) = 0 [pid 10376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10376] write(3, "1000", 4) = 4 [pid 10376] close(3) = 0 [pid 10376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10376] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10376] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10376] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10377 attached [pid 10377] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10376] <... clone3 resumed> => {parent_tid=[10377]}, 88) = 10377 [pid 10377] <... rseq resumed>) = 0 [pid 10376] rt_sigprocmask(SIG_SETMASK, [], [pid 10377] set_robust_list(0x7f55300e29a0, 24 [pid 10376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10377] <... set_robust_list resumed>) = 0 [pid 10377] rt_sigprocmask(SIG_SETMASK, [], [pid 10376] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10377] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10376] <... futex resumed>) = 0 [pid 10377] memfd_create("syzkaller", 0 [pid 10376] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10377] <... memfd_create resumed>) = 3 [pid 10376] <... mmap resumed>) = 0x7f55300a1000 [pid 10377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10376] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10378 attached [pid 10378] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10378] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10376] <... clone3 resumed> => {parent_tid=[10378]}, 88) = 10378 [pid 10376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10376] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10378] rt_sigprocmask(SIG_SETMASK, [], [pid 10376] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10377] <... write resumed>) = 262144 [pid 10377] munmap(0x7f5527ca1000, 262144) = 0 [pid 10377] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10377] <... openat resumed>) = 4 [pid 10377] ioctl(4, LOOP_SET_FD, 3 [pid 10378] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 10378] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10378] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10376] <... futex resumed>) = 0 [pid 10376] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10378] <... futex resumed>) = 0 [pid 10376] <... futex resumed>) = 1 [pid 10378] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10376] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10377] <... ioctl resumed>) = 0 [pid 10377] close(3) = 0 [pid 10377] mkdir("./file1", 0777 [pid 10378] <... mount resumed>) = 0 [pid 10378] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10376] <... futex resumed>) = 0 [pid 10378] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10376] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10376] <... futex resumed>) = 0 [pid 10378] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10376] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10378] <... open resumed>) = 3 [pid 10378] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10376] <... futex resumed>) = 0 [pid 10378] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10376] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10376] <... futex resumed>) = 0 [pid 10378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10376] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10377] <... mkdir resumed>) = 0 [pid 10377] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10377] ioctl(4, LOOP_CLR_FD) = 0 [pid 10377] close(4) = 0 [pid 10377] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10377] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10378] <... write resumed>) = 262144 [pid 10378] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10376] <... futex resumed>) = 0 [pid 10378] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10376] exit_group(0 [pid 10378] <... futex resumed>) = ? [pid 10376] <... exit_group resumed>) = ? [pid 10378] +++ exited with 0 +++ [pid 10377] <... futex resumed>) = ? [ 263.736321][T10377] loop0: detected capacity change from 0 to 512 [ 263.749543][T10377] ext4: Unknown parameter 'nouser_xattr' [pid 10377] +++ exited with 0 +++ [pid 10376] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10376, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1124/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1124/bus") = 0 [pid 5052] umount2("./1124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1124/binderfs") = 0 [pid 5052] umount2("./1124/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1124/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1124/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1124/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1124/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1124") = 0 [pid 5052] mkdir("./1125", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10379 ./strace-static-x86_64: Process 10379 attached [pid 10379] set_robust_list(0x555556d606a0, 24) = 0 [pid 10379] chdir("./1125") = 0 [pid 10379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10379] setpgid(0, 0) = 0 [pid 10379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10379] write(3, "1000", 4) = 4 [pid 10379] close(3) = 0 [pid 10379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10379] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10379] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10379] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10379] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10380]}, 88) = 10380 ./strace-static-x86_64: Process 10380 attached [pid 10380] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10380] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10379] rt_sigprocmask(SIG_SETMASK, [], [pid 10380] rt_sigprocmask(SIG_SETMASK, [], [pid 10379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10379] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10379] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10380] memfd_create("syzkaller", 0 [pid 10379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10379] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10381 attached [pid 10380] <... memfd_create resumed>) = 3 [pid 10380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10381] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10379] <... clone3 resumed> => {parent_tid=[10381]}, 88) = 10381 [pid 10381] <... rseq resumed>) = 0 [pid 10380] <... mmap resumed>) = 0x7f5527ca1000 [pid 10379] rt_sigprocmask(SIG_SETMASK, [], [pid 10381] set_robust_list(0x7f55300c19a0, 24 [pid 10379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10381] <... set_robust_list resumed>) = 0 [pid 10379] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10381] rt_sigprocmask(SIG_SETMASK, [], [pid 10379] <... futex resumed>) = 0 [pid 10381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10379] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10381] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10381] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10379] <... futex resumed>) = 0 [pid 10381] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10379] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10379] <... futex resumed>) = 0 [pid 10381] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10379] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10381] <... mount resumed>) = 0 [pid 10381] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10379] <... futex resumed>) = 0 [pid 10381] <... futex resumed>) = 1 [pid 10379] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10381] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10379] <... futex resumed>) = 0 [pid 10379] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10381] <... open resumed>) = 5 [pid 10381] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10379] <... futex resumed>) = 0 [pid 10379] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10381] <... futex resumed>) = 1 [pid 10379] <... futex resumed>) = 0 [pid 10381] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10379] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10381] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10381] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10379] <... futex resumed>) = 0 [pid 10381] <... futex resumed>) = 1 [pid 10381] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10380] <... write resumed>) = 262144 [pid 10380] munmap(0x7f5527ca1000, 262144) = 0 [pid 10380] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10380] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10380] close(3) = 0 [pid 10380] mkdir("./file1", 0777) = 0 [pid 10380] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10380] ioctl(6, LOOP_CLR_FD) = 0 [pid 10380] close(6) = 0 [pid 10380] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10380] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10379] exit_group(0 [pid 10380] <... futex resumed>) = ? [pid 10380] +++ exited with 0 +++ [pid 10379] <... exit_group resumed>) = ? [pid 10381] <... futex resumed>) = ? [pid 10381] +++ exited with 0 +++ [pid 10379] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10379, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1125/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1125/bus") = 0 [pid 5052] umount2("./1125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1125/binderfs") = 0 [pid 5052] umount2("./1125/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1125/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1125/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1125/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1125/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1125") = 0 [ 263.873535][T10380] loop0: detected capacity change from 0 to 512 [ 263.883123][T10380] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1126", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10382 attached , child_tidptr=0x555556d60690) = 10382 [pid 10382] set_robust_list(0x555556d606a0, 24) = 0 [pid 10382] chdir("./1126") = 0 [pid 10382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10382] setpgid(0, 0) = 0 [pid 10382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10382] write(3, "1000", 4) = 4 [pid 10382] close(3) = 0 [pid 10382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10382] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10382] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10382] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10383]}, 88) = 10383 ./strace-static-x86_64: Process 10383 attached [pid 10383] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10383] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10382] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10382] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10383] rt_sigprocmask(SIG_SETMASK, [], [pid 10382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10383] memfd_create("syzkaller", 0 [pid 10382] <... mmap resumed>) = 0x7f55300a1000 [pid 10383] <... memfd_create resumed>) = 3 [pid 10382] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10382] <... mprotect resumed>) = 0 [pid 10383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10384 attached => {parent_tid=[10384]}, 88) = 10384 [pid 10384] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10384] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10382] rt_sigprocmask(SIG_SETMASK, [], [pid 10384] rt_sigprocmask(SIG_SETMASK, [], [pid 10382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10382] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10382] <... futex resumed>) = 0 [pid 10384] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10382] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10384] <... open resumed>) = 4 [pid 10384] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10384] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10382] <... futex resumed>) = 0 [pid 10382] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10384] <... futex resumed>) = 0 [pid 10382] <... futex resumed>) = 1 [pid 10384] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10382] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10384] <... mount resumed>) = 0 [pid 10384] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10384] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10382] <... futex resumed>) = 0 [pid 10382] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10384] <... futex resumed>) = 0 [pid 10382] <... futex resumed>) = 1 [pid 10384] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10382] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10384] <... open resumed>) = 5 [pid 10383] <... write resumed>) = 262144 [pid 10384] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10382] <... futex resumed>) = 0 [pid 10384] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10382] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10382] <... futex resumed>) = 0 [pid 10384] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10383] munmap(0x7f5527ca1000, 262144 [pid 10382] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10384] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10384] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10382] <... futex resumed>) = 0 [pid 10383] <... munmap resumed>) = 0 [pid 10384] <... futex resumed>) = 1 [pid 10383] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10384] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10383] <... openat resumed>) = 6 [pid 10383] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10383] close(3) = 0 [pid 10383] mkdir("./file1", 0777) = 0 [pid 10383] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10383] ioctl(6, LOOP_CLR_FD) = 0 [pid 10383] close(6) = 0 [pid 10383] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10383] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10382] exit_group(0 [pid 10383] <... futex resumed>) = ? [pid 10382] <... exit_group resumed>) = ? [pid 10383] +++ exited with 0 +++ [pid 10384] <... futex resumed>) = ? [pid 10384] +++ exited with 0 +++ [pid 10382] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10382, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1126/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1126/bus") = 0 [pid 5052] umount2("./1126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1126/binderfs") = 0 [pid 5052] umount2("./1126/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1126/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1126/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1126/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1126/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1126") = 0 [pid 5052] mkdir("./1127", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10385 ./strace-static-x86_64: Process 10385 attached [pid 10385] set_robust_list(0x555556d606a0, 24) = 0 [pid 10385] chdir("./1127") = 0 [pid 10385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10385] setpgid(0, 0) = 0 [pid 10385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10385] write(3, "1000", 4) = 4 [pid 10385] close(3) = 0 [pid 10385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10385] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10385] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10385] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10385] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10386 attached [pid 10386] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10386] set_robust_list(0x7f55300e29a0, 24 [pid 10385] <... clone3 resumed> => {parent_tid=[10386]}, 88) = 10386 [pid 10386] <... set_robust_list resumed>) = 0 [pid 10385] rt_sigprocmask(SIG_SETMASK, [], [pid 10386] rt_sigprocmask(SIG_SETMASK, [], [pid 10385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10385] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10386] memfd_create("syzkaller", 0 [pid 10385] <... futex resumed>) = 0 [pid 10385] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10386] <... memfd_create resumed>) = 3 [pid 10385] <... mmap resumed>) = 0x7f55300a1000 [pid 10386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10385] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [ 263.992801][T10383] loop0: detected capacity change from 0 to 512 [ 264.002269][T10383] ext4: Unknown parameter 'nouser_xattr' [pid 10386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10387]}, 88) = 10387 [pid 10385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10385] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10385] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10387 attached [pid 10387] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10387] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10387] rt_sigprocmask(SIG_SETMASK, [], [pid 10386] <... write resumed>) = 262144 [pid 10386] munmap(0x7f5527ca1000, 262144 [pid 10387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10387] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10386] <... munmap resumed>) = 0 [pid 10386] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10386] ioctl(5, LOOP_SET_FD, 3 [pid 10387] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10385] <... futex resumed>) = 0 [pid 10385] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10385] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10386] <... ioctl resumed>) = 0 [pid 10386] close(3) = 0 [pid 10386] mkdir("./file1", 0777 [pid 10387] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10387] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10386] <... mkdir resumed>) = 0 [pid 10387] <... futex resumed>) = 1 [pid 10386] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10385] <... futex resumed>) = 0 [pid 10385] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10387] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10385] <... futex resumed>) = 0 [pid 10387] <... open resumed>) = 3 [pid 10385] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10387] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10386] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10387] <... futex resumed>) = 1 [pid 10386] ioctl(5, LOOP_CLR_FD [pid 10385] <... futex resumed>) = 0 [pid 10387] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10385] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10386] <... ioctl resumed>) = 0 [pid 10385] <... futex resumed>) = 0 [pid 10387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10386] close(5 [pid 10385] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10386] <... close resumed>) = 0 [pid 10386] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10386] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10387] <... write resumed>) = 262144 [pid 10387] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10385] <... futex resumed>) = 0 [pid 10387] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10385] exit_group(0 [pid 10387] <... futex resumed>) = ? [pid 10386] <... futex resumed>) = ? [pid 10385] <... exit_group resumed>) = ? [pid 10387] +++ exited with 0 +++ [pid 10386] +++ exited with 0 +++ [pid 10385] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10385, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 264.063721][T10386] loop0: detected capacity change from 0 to 512 [ 264.076354][T10386] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1127/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1127/bus") = 0 [pid 5052] umount2("./1127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1127/binderfs") = 0 [pid 5052] umount2("./1127/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1127/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1127/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1127/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1127/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1127") = 0 [pid 5052] mkdir("./1128", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10388 ./strace-static-x86_64: Process 10388 attached [pid 10388] set_robust_list(0x555556d606a0, 24) = 0 [pid 10388] chdir("./1128") = 0 [pid 10388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10388] setpgid(0, 0) = 0 [pid 10388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10388] write(3, "1000", 4) = 4 [pid 10388] close(3) = 0 [pid 10388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10388] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10388] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10388] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10389 attached [pid 10389] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10389] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10389] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10388] <... clone3 resumed> => {parent_tid=[10389]}, 88) = 10389 [pid 10388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10388] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10389] <... futex resumed>) = 0 [pid 10389] memfd_create("syzkaller", 0) = 3 [pid 10389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10388] <... futex resumed>) = 1 [pid 10388] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5527ca1000 [pid 10388] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0} [pid 10389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10388] <... clone3 resumed> => {parent_tid=[10390]}, 88) = 10390 [pid 10388] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10390 attached NULL, 8) = 0 [pid 10390] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10388] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10390] <... rseq resumed>) = 0 [pid 10388] <... futex resumed>) = 0 [pid 10390] set_robust_list(0x7f5527cc19a0, 24 [pid 10388] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10390] <... set_robust_list resumed>) = 0 [pid 10390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10390] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10390] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10388] <... futex resumed>) = 0 [pid 10389] <... write resumed>) = 262144 [pid 10388] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10389] munmap(0x7f5527cc2000, 262144 [pid 10390] <... futex resumed>) = 1 [pid 10390] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10388] <... futex resumed>) = 0 [pid 10389] <... munmap resumed>) = 0 [pid 10388] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10390] <... mount resumed>) = 0 [pid 10389] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10390] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10389] <... openat resumed>) = 5 [pid 10390] <... futex resumed>) = 1 [pid 10389] ioctl(5, LOOP_SET_FD, 3 [pid 10388] <... futex resumed>) = 0 [pid 10390] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10388] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10388] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10390] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10390] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10388] <... futex resumed>) = 0 [pid 10390] <... futex resumed>) = 1 [pid 10388] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10390] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10388] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10389] <... ioctl resumed>) = 0 [pid 10389] close(3) = 0 [pid 10389] mkdir("./file1", 0777) = 0 [pid 10389] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10389] ioctl(5, LOOP_CLR_FD) = 0 [pid 10389] close(5 [pid 10390] <... write resumed>) = 262144 [pid 10389] <... close resumed>) = 0 [pid 10390] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10388] <... futex resumed>) = 0 [pid 10390] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10389] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10389] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10388] exit_group(0 [pid 10390] <... futex resumed>) = ? [pid 10389] <... futex resumed>) = ? [pid 10390] +++ exited with 0 +++ [pid 10389] +++ exited with 0 +++ [pid 10388] <... exit_group resumed>) = ? [pid 10388] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10388, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1128/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1128/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1128/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1128/bus") = 0 [pid 5052] umount2("./1128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1128/binderfs") = 0 [pid 5052] umount2("./1128/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1128/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1128/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1128/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [ 264.192271][T10389] loop0: detected capacity change from 0 to 512 [ 264.204638][T10389] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(4) = 0 [pid 5052] rmdir("./1128/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1128") = 0 [pid 5052] mkdir("./1129", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10391 attached , child_tidptr=0x555556d60690) = 10391 [pid 10391] set_robust_list(0x555556d606a0, 24) = 0 [pid 10391] chdir("./1129") = 0 [pid 10391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10391] setpgid(0, 0) = 0 [pid 10391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10391] write(3, "1000", 4) = 4 [pid 10391] close(3) = 0 [pid 10391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10391] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10391] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10391] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10391] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10392]}, 88) = 10392 ./strace-static-x86_64: Process 10392 attached [pid 10391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10391] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10391] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10391] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10392] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10393 attached [pid 10393] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10393] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10393] rt_sigprocmask(SIG_SETMASK, [], [pid 10391] <... clone3 resumed> => {parent_tid=[10393]}, 88) = 10393 [pid 10393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10391] rt_sigprocmask(SIG_SETMASK, [], [pid 10392] <... rseq resumed>) = 0 [pid 10393] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10392] set_robust_list(0x7f55300e29a0, 24 [pid 10391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10392] <... set_robust_list resumed>) = 0 [pid 10391] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10393] <... futex resumed>) = 0 [pid 10392] rt_sigprocmask(SIG_SETMASK, [], [pid 10391] <... futex resumed>) = 1 [pid 10393] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10391] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10392] memfd_create("syzkaller", 0 [pid 10393] <... open resumed>) = 4 [pid 10392] <... memfd_create resumed>) = 3 [pid 10393] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10391] <... futex resumed>) = 0 [pid 10393] <... futex resumed>) = 1 [pid 10391] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10393] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10391] <... futex resumed>) = 0 [pid 10392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10391] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10393] <... mount resumed>) = 0 [pid 10392] <... mmap resumed>) = 0x7f5527ca1000 [pid 10393] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10391] <... futex resumed>) = 0 [pid 10391] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10393] <... futex resumed>) = 1 [pid 10391] <... futex resumed>) = 0 [pid 10393] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10391] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10393] <... open resumed>) = 5 [pid 10393] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10391] <... futex resumed>) = 0 [pid 10393] <... futex resumed>) = 1 [pid 10391] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10393] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10391] <... futex resumed>) = 0 [pid 10393] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10391] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10393] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10393] <... futex resumed>) = 0 [pid 10393] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10392] <... write resumed>) = 262144 [pid 10392] munmap(0x7f5527ca1000, 262144) = 0 [pid 10392] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10392] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10392] close(3) = 0 [pid 10392] mkdir("./file1", 0777) = 0 [pid 10392] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10392] ioctl(6, LOOP_CLR_FD) = 0 [pid 10392] close(6) = 0 [pid 10392] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10392] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10391] exit_group(0) = ? [pid 10392] <... futex resumed>) = ? [pid 10392] +++ exited with 0 +++ [pid 10393] <... futex resumed>) = ? [pid 10393] +++ exited with 0 +++ [pid 10391] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10391, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1129/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1129/bus") = 0 [pid 5052] umount2("./1129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1129/binderfs") = 0 [pid 5052] umount2("./1129/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1129/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1129/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1129/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1129/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1129") = 0 [ 264.312330][T10392] loop0: detected capacity change from 0 to 512 [ 264.322228][T10392] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1130", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10394 ./strace-static-x86_64: Process 10394 attached [pid 10394] set_robust_list(0x555556d606a0, 24) = 0 [pid 10394] chdir("./1130") = 0 [pid 10394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10394] setpgid(0, 0) = 0 [pid 10394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10394] write(3, "1000", 4) = 4 [pid 10394] close(3) = 0 [pid 10394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10394] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10394] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10394] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10394] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10395 attached => {parent_tid=[10395]}, 88) = 10395 [pid 10394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10395] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10395] set_robust_list(0x7f55300e29a0, 24 [pid 10394] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10395] <... set_robust_list resumed>) = 0 [pid 10394] <... futex resumed>) = 0 [pid 10395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10394] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10395] memfd_create("syzkaller", 0 [pid 10394] <... futex resumed>) = 0 [pid 10395] <... memfd_create resumed>) = 3 [pid 10394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10394] <... mmap resumed>) = 0x7f5527ca1000 [pid 10394] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10396 attached [pid 10395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10394] <... clone3 resumed> => {parent_tid=[10396]}, 88) = 10396 [pid 10396] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053) = 0 [pid 10396] set_robust_list(0x7f5527cc19a0, 24) = 0 [pid 10394] rt_sigprocmask(SIG_SETMASK, [], [pid 10396] rt_sigprocmask(SIG_SETMASK, [], [pid 10394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10396] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10394] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10396] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10394] <... futex resumed>) = 0 [pid 10394] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10396] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10394] <... futex resumed>) = 0 [pid 10394] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10394] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10396] <... futex resumed>) = 1 [pid 10396] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10395] <... write resumed>) = 262144 [pid 10396] <... mount resumed>) = 0 [pid 10396] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10394] <... futex resumed>) = 0 [pid 10396] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10394] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10396] <... open resumed>) = 5 [pid 10395] munmap(0x7f5527cc2000, 262144 [pid 10394] <... futex resumed>) = 0 [pid 10394] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10396] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10395] <... munmap resumed>) = 0 [pid 10394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10395] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10394] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10396] <... futex resumed>) = 0 [pid 10395] <... openat resumed>) = 6 [pid 10396] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10394] <... futex resumed>) = 0 [pid 10396] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10394] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10395] ioctl(6, LOOP_SET_FD, 3 [pid 10396] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10396] <... futex resumed>) = 0 [pid 10396] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10395] <... ioctl resumed>) = 0 [pid 10395] close(3) = 0 [pid 10395] mkdir("./file1", 0777) = 0 [pid 10395] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10395] ioctl(6, LOOP_CLR_FD) = 0 [pid 10395] close(6) = 0 [pid 10395] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10395] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10394] exit_group(0 [pid 10395] <... futex resumed>) = ? [pid 10395] +++ exited with 0 +++ [pid 10396] <... futex resumed>) = ? [pid 10396] +++ exited with 0 +++ [pid 10394] <... exit_group resumed>) = ? [pid 10394] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10394, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1130/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1130/bus") = 0 [pid 5052] umount2("./1130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1130/binderfs") = 0 [pid 5052] umount2("./1130/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1130/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1130/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1130/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1130/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 264.422141][T10395] loop0: detected capacity change from 0 to 512 [ 264.431624][T10395] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1130") = 0 [pid 5052] mkdir("./1131", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10397 attached , child_tidptr=0x555556d60690) = 10397 [pid 10397] set_robust_list(0x555556d606a0, 24) = 0 [pid 10397] chdir("./1131") = 0 [pid 10397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10397] setpgid(0, 0) = 0 [pid 10397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10397] write(3, "1000", 4) = 4 [pid 10397] close(3) = 0 [pid 10397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10397] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10397] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10397] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10397] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10397] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10398]}, 88) = 10398 [pid 10397] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10398 attached [pid 10398] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10397] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10398] <... rseq resumed>) = 0 [pid 10398] set_robust_list(0x7f55300e29a0, 24 [pid 10397] <... futex resumed>) = 0 [pid 10398] <... set_robust_list resumed>) = 0 [pid 10397] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10398] rt_sigprocmask(SIG_SETMASK, [], [pid 10397] <... futex resumed>) = 0 [pid 10398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10398] memfd_create("syzkaller", 0 [pid 10397] <... mmap resumed>) = 0x7f55300a1000 [pid 10398] <... memfd_create resumed>) = 3 [pid 10397] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10397] <... mprotect resumed>) = 0 [pid 10397] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10399 attached [pid 10399] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10397] <... clone3 resumed> => {parent_tid=[10399]}, 88) = 10399 [pid 10399] <... rseq resumed>) = 0 [pid 10398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10397] rt_sigprocmask(SIG_SETMASK, [], [pid 10399] set_robust_list(0x7f55300c19a0, 24 [pid 10397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10399] <... set_robust_list resumed>) = 0 [pid 10397] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10397] <... futex resumed>) = 0 [pid 10399] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10397] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10399] <... open resumed>) = 4 [pid 10399] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10397] <... futex resumed>) = 0 [pid 10397] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10397] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10399] <... futex resumed>) = 1 [pid 10399] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10398] <... write resumed>) = 262144 [pid 10398] munmap(0x7f5527ca1000, 262144 [pid 10399] <... mount resumed>) = 0 [pid 10399] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10398] <... munmap resumed>) = 0 [pid 10399] <... futex resumed>) = 1 [pid 10397] <... futex resumed>) = 0 [pid 10399] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10397] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10397] <... futex resumed>) = 0 [pid 10399] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10397] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10398] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10399] <... open resumed>) = 5 [pid 10398] <... openat resumed>) = 6 [pid 10398] ioctl(6, LOOP_SET_FD, 3 [pid 10399] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10397] <... futex resumed>) = 0 [pid 10399] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10397] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10397] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10398] <... ioctl resumed>) = 0 [pid 10398] close(3) = 0 [pid 10398] mkdir("./file1", 0777) = 0 [pid 10398] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10399] <... write resumed>) = 262144 [pid 10399] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10399] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10397] <... futex resumed>) = 0 [pid 10398] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10398] ioctl(6, LOOP_CLR_FD) = 0 [pid 10398] close(6) = 0 [pid 10398] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10398] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10397] exit_group(0) = ? [pid 10399] <... futex resumed>) = ? [pid 10398] <... futex resumed>) = ? [pid 10398] +++ exited with 0 +++ [pid 10399] +++ exited with 0 +++ [pid 10397] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10397, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1131/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1131/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1131/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1131/bus") = 0 [pid 5052] umount2("./1131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1131/binderfs") = 0 [pid 5052] umount2("./1131/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1131/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1131/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1131/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1131/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 264.529106][T10398] loop0: detected capacity change from 0 to 512 [ 264.542127][T10398] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1131") = 0 [pid 5052] mkdir("./1132", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10400 attached , child_tidptr=0x555556d60690) = 10400 [pid 10400] set_robust_list(0x555556d606a0, 24) = 0 [pid 10400] chdir("./1132") = 0 [pid 10400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10400] setpgid(0, 0) = 0 [pid 10400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10400] write(3, "1000", 4) = 4 [pid 10400] close(3) = 0 [pid 10400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10400] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10400] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10400] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10401 attached [pid 10401] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10400] <... clone3 resumed> => {parent_tid=[10401]}, 88) = 10401 [pid 10401] <... rseq resumed>) = 0 [pid 10401] set_robust_list(0x7f55300e29a0, 24 [pid 10400] rt_sigprocmask(SIG_SETMASK, [], [pid 10401] <... set_robust_list resumed>) = 0 [pid 10400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10400] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10401] rt_sigprocmask(SIG_SETMASK, [], [pid 10400] <... futex resumed>) = 0 [pid 10401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10400] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10401] memfd_create("syzkaller", 0 [pid 10400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10401] <... memfd_create resumed>) = 3 [pid 10400] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10400] <... mprotect resumed>) = 0 [pid 10401] <... mmap resumed>) = 0x7f5527ca1000 [pid 10400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10402 attached [pid 10402] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10400] <... clone3 resumed> => {parent_tid=[10402]}, 88) = 10402 [pid 10402] <... rseq resumed>) = 0 [pid 10400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10402] set_robust_list(0x7f55300c19a0, 24 [pid 10400] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10402] <... set_robust_list resumed>) = 0 [pid 10400] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10402] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10402] <... open resumed>) = 4 [pid 10402] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10400] <... futex resumed>) = 0 [pid 10402] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10400] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10400] <... futex resumed>) = 0 [pid 10402] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10400] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10402] <... mount resumed>) = 0 [pid 10402] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10400] <... futex resumed>) = 0 [pid 10400] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10400] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10402] <... futex resumed>) = 1 [pid 10402] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10402] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10400] <... futex resumed>) = 0 [pid 10402] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10400] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10402] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10400] <... futex resumed>) = 0 [pid 10402] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10400] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10402] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10402] <... futex resumed>) = 0 [pid 10402] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10401] <... write resumed>) = 262144 [pid 10401] munmap(0x7f5527ca1000, 262144) = 0 [pid 10401] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10401] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10401] close(3) = 0 [pid 10401] mkdir("./file1", 0777) = 0 [pid 10401] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10401] ioctl(6, LOOP_CLR_FD) = 0 [pid 10401] close(6) = 0 [pid 10401] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10401] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10400] exit_group(0 [pid 10402] <... futex resumed>) = ? [pid 10401] <... futex resumed>) = ? [pid 10400] <... exit_group resumed>) = ? [pid 10401] +++ exited with 0 +++ [pid 10402] +++ exited with 0 +++ [pid 10400] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10400, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1132/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1132/bus") = 0 [pid 5052] umount2("./1132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1132/binderfs") = 0 [pid 5052] umount2("./1132/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1132/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1132/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1132/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1132/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [ 264.648976][T10401] loop0: detected capacity change from 0 to 512 [ 264.658708][T10401] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(3) = 0 [pid 5052] rmdir("./1132") = 0 [pid 5052] mkdir("./1133", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10403 attached , child_tidptr=0x555556d60690) = 10403 [pid 10403] set_robust_list(0x555556d606a0, 24) = 0 [pid 10403] chdir("./1133") = 0 [pid 10403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10403] setpgid(0, 0) = 0 [pid 10403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10403] write(3, "1000", 4) = 4 [pid 10403] close(3) = 0 [pid 10403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10403] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10403] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10403] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10404]}, 88) = 10404 [pid 10403] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10404 attached [pid 10404] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10404] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10403] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10403] <... futex resumed>) = 0 [pid 10403] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10404] memfd_create("syzkaller", 0 [pid 10403] <... futex resumed>) = 0 [pid 10403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10403] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10404] <... memfd_create resumed>) = 3 [pid 10404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10403] <... mprotect resumed>) = 0 [pid 10404] <... mmap resumed>) = 0x7f5527ca1000 [pid 10403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10405 attached [pid 10405] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10405] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10403] <... clone3 resumed> => {parent_tid=[10405]}, 88) = 10405 [pid 10405] rt_sigprocmask(SIG_SETMASK, [], [pid 10403] rt_sigprocmask(SIG_SETMASK, [], [pid 10405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10403] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10405] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10403] <... futex resumed>) = 0 [pid 10403] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10405] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10403] <... futex resumed>) = 0 [pid 10403] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10405] <... futex resumed>) = 1 [pid 10404] <... write resumed>) = 262144 [pid 10403] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10405] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10404] munmap(0x7f5527ca1000, 262144) = 0 [pid 10405] <... mount resumed>) = 0 [pid 10404] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10405] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10404] ioctl(5, LOOP_SET_FD, 3 [pid 10403] <... futex resumed>) = 0 [pid 10405] <... futex resumed>) = 1 [pid 10405] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10403] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10405] <... open resumed>) = 6 [pid 10403] <... futex resumed>) = 0 [pid 10405] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10403] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10403] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10405] <... futex resumed>) = 0 [pid 10403] <... futex resumed>) = 0 [pid 10405] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10403] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10404] <... ioctl resumed>) = 0 [pid 10404] close(3) = 0 [pid 10404] mkdir("./file1", 0777) = 0 [pid 10404] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10405] <... write resumed>) = 262144 [pid 10405] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10405] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10403] <... futex resumed>) = 0 [pid 10404] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10404] ioctl(5, LOOP_CLR_FD) = 0 [pid 10404] close(5) = 0 [pid 10404] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10404] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10403] exit_group(0 [pid 10404] <... futex resumed>) = ? [pid 10404] +++ exited with 0 +++ [pid 10403] <... exit_group resumed>) = ? [pid 10405] <... futex resumed>) = ? [pid 10405] +++ exited with 0 +++ [pid 10403] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10403, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1133/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1133/bus") = 0 [pid 5052] umount2("./1133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1133/binderfs") = 0 [pid 5052] umount2("./1133/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1133/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1133/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1133/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1133/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 264.758941][T10404] loop0: detected capacity change from 0 to 512 [ 264.772346][T10404] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1133") = 0 [pid 5052] mkdir("./1134", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10406 attached , child_tidptr=0x555556d60690) = 10406 [pid 10406] set_robust_list(0x555556d606a0, 24) = 0 [pid 10406] chdir("./1134") = 0 [pid 10406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10406] setpgid(0, 0) = 0 [pid 10406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10406] write(3, "1000", 4) = 4 [pid 10406] close(3) = 0 [pid 10406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10406] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10406] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10406] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10406] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10406] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10406] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10407]}, 88) = 10407 [pid 10406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10406] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10406] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10406] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10406] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10406] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10408 attached [pid 10408] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10408] set_robust_list(0x7f55300c19a0, 24./strace-static-x86_64: Process 10407 attached ) = 0 [pid 10406] <... clone3 resumed> => {parent_tid=[10408]}, 88) = 10408 [pid 10408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10406] rt_sigprocmask(SIG_SETMASK, [], [pid 10408] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10406] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10408] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10406] <... futex resumed>) = 0 [pid 10406] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10408] <... open resumed>) = 3 [pid 10408] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10406] <... futex resumed>) = 0 [pid 10408] <... futex resumed>) = 1 [pid 10406] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10408] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10407] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10406] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10407] <... rseq resumed>) = 0 [pid 10408] <... mount resumed>) = 0 [pid 10407] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10407] rt_sigprocmask(SIG_SETMASK, [], [pid 10408] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10408] <... futex resumed>) = 1 [pid 10406] <... futex resumed>) = 0 [pid 10407] memfd_create("syzkaller", 0 [pid 10408] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10406] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10408] <... open resumed>) = 5 [pid 10407] <... memfd_create resumed>) = 4 [pid 10406] <... futex resumed>) = 0 [pid 10408] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10406] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10408] <... futex resumed>) = 0 [pid 10406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10408] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10406] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10408] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10406] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10408] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10407] <... mmap resumed>) = 0x7f5527ca1000 [pid 10408] <... futex resumed>) = 0 [pid 10406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10408] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10407] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10407] munmap(0x7f5527ca1000, 262144) = 0 [pid 10407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10407] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10407] close(4) = 0 [pid 10407] mkdir("./file1", 0777) = 0 [pid 10407] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10407] ioctl(6, LOOP_CLR_FD) = 0 [pid 10407] close(6) = 0 [pid 10407] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10407] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10406] exit_group(0 [pid 10408] <... futex resumed>) = ? [pid 10406] <... exit_group resumed>) = ? [pid 10407] <... futex resumed>) = ? [pid 10407] +++ exited with 0 +++ [pid 10408] +++ exited with 0 +++ [pid 10406] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10406, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1134/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1134/bus") = 0 [pid 5052] umount2("./1134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1134/binderfs") = 0 [pid 5052] umount2("./1134/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1134/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1134/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1134/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1134/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 264.878265][T10407] loop0: detected capacity change from 0 to 512 [ 264.887832][T10407] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1134") = 0 [pid 5052] mkdir("./1135", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10409 attached , child_tidptr=0x555556d60690) = 10409 [pid 10409] set_robust_list(0x555556d606a0, 24) = 0 [pid 10409] chdir("./1135") = 0 [pid 10409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10409] setpgid(0, 0) = 0 [pid 10409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10409] write(3, "1000", 4) = 4 [pid 10409] close(3) = 0 [pid 10409] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10409] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10409] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10409] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10409] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10409] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10410 attached => {parent_tid=[10410]}, 88) = 10410 [pid 10410] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10409] rt_sigprocmask(SIG_SETMASK, [], [pid 10410] set_robust_list(0x7f55300e29a0, 24 [pid 10409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10410] <... set_robust_list resumed>) = 0 [pid 10409] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10410] rt_sigprocmask(SIG_SETMASK, [], [pid 10409] <... futex resumed>) = 0 [pid 10409] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10409] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10410] memfd_create("syzkaller", 0 [pid 10409] <... mprotect resumed>) = 0 [pid 10410] <... memfd_create resumed>) = 3 [pid 10410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10409] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10410] <... mmap resumed>) = 0x7f5527ca1000 [pid 10410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10409] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10411 attached [pid 10411] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10411] set_robust_list(0x7f55300c19a0, 24 [pid 10409] <... clone3 resumed> => {parent_tid=[10411]}, 88) = 10411 [pid 10409] rt_sigprocmask(SIG_SETMASK, [], [pid 10411] <... set_robust_list resumed>) = 0 [pid 10411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10411] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10410] <... write resumed>) = 262144 [pid 10410] munmap(0x7f5527ca1000, 262144) = 0 [pid 10410] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10409] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10411] <... futex resumed>) = 0 [pid 10409] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10411] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10410] <... openat resumed>) = 4 [pid 10411] <... open resumed>) = 5 [pid 10410] ioctl(4, LOOP_SET_FD, 3 [pid 10411] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10409] <... futex resumed>) = 0 [pid 10409] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10411] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10409] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10411] <... mount resumed>) = 0 [pid 10411] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10409] <... futex resumed>) = 0 [pid 10409] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10411] <... futex resumed>) = 1 [pid 10409] <... futex resumed>) = 0 [pid 10411] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10409] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10411] <... open resumed>) = 6 [pid 10410] <... ioctl resumed>) = 0 [pid 10411] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10410] close(3) = 0 [pid 10410] mkdir("./file1", 0777 [pid 10411] <... futex resumed>) = 1 [pid 10409] <... futex resumed>) = 0 [pid 10411] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10410] <... mkdir resumed>) = 0 [pid 10409] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10410] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10409] <... futex resumed>) = 0 [pid 10409] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10410] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10410] ioctl(4, LOOP_CLR_FD) = 0 [pid 10410] close(4 [pid 10411] <... write resumed>) = 262144 [pid 10410] <... close resumed>) = 0 [pid 10411] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10409] <... futex resumed>) = 0 [pid 10411] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10410] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10410] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10409] exit_group(0 [pid 10411] <... futex resumed>) = ? [pid 10410] <... futex resumed>) = ? [pid 10409] <... exit_group resumed>) = ? [pid 10411] +++ exited with 0 +++ [pid 10410] +++ exited with 0 +++ [pid 10409] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10409, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] umount2("./1135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1135/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1135/bus") = 0 [pid 5052] umount2("./1135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1135/binderfs") = 0 [pid 5052] umount2("./1135/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1135/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1135/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1135/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1135/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1135") = 0 [pid 5052] mkdir("./1136", 0777) = 0 [ 264.999721][T10410] loop0: detected capacity change from 0 to 512 [ 265.010865][T10410] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10412 attached , child_tidptr=0x555556d60690) = 10412 [pid 10412] set_robust_list(0x555556d606a0, 24) = 0 [pid 10412] chdir("./1136") = 0 [pid 10412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10412] setpgid(0, 0) = 0 [pid 10412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10412] write(3, "1000", 4) = 4 [pid 10412] close(3) = 0 [pid 10412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10412] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10412] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10412] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10413]}, 88) = 10413 [pid 10412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10412] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10412] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10412] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10414 attached ./strace-static-x86_64: Process 10413 attached [pid 10414] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10413] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10414] <... rseq resumed>) = 0 [pid 10413] <... rseq resumed>) = 0 [pid 10414] set_robust_list(0x7f55300c19a0, 24 [pid 10413] set_robust_list(0x7f55300e29a0, 24 [pid 10414] <... set_robust_list resumed>) = 0 [pid 10413] <... set_robust_list resumed>) = 0 [pid 10414] rt_sigprocmask(SIG_SETMASK, [], [pid 10413] rt_sigprocmask(SIG_SETMASK, [], [pid 10414] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10414] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10413] memfd_create("syzkaller", 0 [pid 10412] <... clone3 resumed> => {parent_tid=[10414]}, 88) = 10414 [pid 10413] <... memfd_create resumed>) = 3 [pid 10412] rt_sigprocmask(SIG_SETMASK, [], [pid 10413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10413] <... mmap resumed>) = 0x7f5527ca1000 [pid 10412] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10414] <... futex resumed>) = 0 [pid 10412] <... futex resumed>) = 1 [pid 10414] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10412] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10414] <... open resumed>) = 4 [pid 10413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10414] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10412] <... futex resumed>) = 0 [pid 10412] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10414] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10412] <... futex resumed>) = 0 [pid 10414] <... mount resumed>) = 0 [pid 10412] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10414] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10414] <... futex resumed>) = 0 [pid 10413] <... write resumed>) = 262144 [pid 10412] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10413] munmap(0x7f5527ca1000, 262144 [pid 10414] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10412] <... futex resumed>) = 0 [pid 10414] <... open resumed>) = 5 [pid 10413] <... munmap resumed>) = 0 [pid 10412] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10413] ioctl(6, LOOP_SET_FD, 3 [pid 10414] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10414] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10412] <... futex resumed>) = 0 [pid 10412] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10414] <... futex resumed>) = 0 [pid 10412] <... futex resumed>) = 1 [pid 10414] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10412] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10413] <... ioctl resumed>) = 0 [pid 10413] close(3) = 0 [pid 10413] mkdir("./file1", 0777) = 0 [pid 10413] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10414] <... write resumed>) = 262144 [pid 10414] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10414] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10412] <... futex resumed>) = 0 [pid 10413] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10413] ioctl(6, LOOP_CLR_FD) = 0 [pid 10413] close(6) = 0 [pid 10413] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10413] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10412] exit_group(0 [pid 10413] <... futex resumed>) = ? [pid 10412] <... exit_group resumed>) = ? [pid 10413] +++ exited with 0 +++ [pid 10414] <... futex resumed>) = ? [pid 10414] +++ exited with 0 +++ [pid 10412] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10412, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1136/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1136/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1136/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1136/bus") = 0 [pid 5052] umount2("./1136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1136/binderfs") = 0 [pid 5052] umount2("./1136/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1136/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1136/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1136/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1136/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1136") = 0 [ 265.108170][T10413] loop0: detected capacity change from 0 to 512 [ 265.118601][T10413] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1137", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10415 ./strace-static-x86_64: Process 10415 attached [pid 10415] set_robust_list(0x555556d606a0, 24) = 0 [pid 10415] chdir("./1137") = 0 [pid 10415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10415] setpgid(0, 0) = 0 [pid 10415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10415] write(3, "1000", 4) = 4 [pid 10415] close(3) = 0 [pid 10415] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10415] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10415] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10415] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10415] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10415] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10416]}, 88) = 10416 [pid 10415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10415] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10415] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10415] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 10416 attached [pid 10416] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10415] <... mprotect resumed>) = 0 [pid 10416] <... rseq resumed>) = 0 [pid 10416] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10415] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10415] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10417 attached [pid 10417] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10415] <... clone3 resumed> => {parent_tid=[10417]}, 88) = 10417 [pid 10417] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10415] rt_sigprocmask(SIG_SETMASK, [], [pid 10417] rt_sigprocmask(SIG_SETMASK, [], [pid 10416] memfd_create("syzkaller", 0 [pid 10415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10416] <... memfd_create resumed>) = 3 [pid 10415] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10415] <... futex resumed>) = 0 [pid 10417] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10416] <... mmap resumed>) = 0x7f5527ca1000 [pid 10417] <... open resumed>) = 4 [pid 10415] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10417] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10415] <... futex resumed>) = 0 [pid 10415] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10415] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10417] <... futex resumed>) = 1 [pid 10417] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10417] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10415] <... futex resumed>) = 0 [pid 10417] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10415] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10417] <... open resumed>) = 5 [pid 10415] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10417] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10416] <... write resumed>) = 262144 [pid 10415] <... futex resumed>) = 0 [pid 10417] <... futex resumed>) = 1 [pid 10415] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10417] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10416] munmap(0x7f5527ca1000, 262144 [pid 10415] <... futex resumed>) = 0 [pid 10417] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10415] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10416] <... munmap resumed>) = 0 [pid 10417] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10415] <... futex resumed>) = 0 [pid 10417] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10416] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10416] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10416] close(3) = 0 [pid 10416] mkdir("./file1", 0777) = 0 [pid 10416] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10416] ioctl(6, LOOP_CLR_FD) = 0 [pid 10416] close(6) = 0 [pid 10416] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10416] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10415] exit_group(0 [pid 10416] <... futex resumed>) = ? [pid 10416] +++ exited with 0 +++ [pid 10415] <... exit_group resumed>) = ? [pid 10417] <... futex resumed>) = ? [pid 10417] +++ exited with 0 +++ [pid 10415] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10415, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1137/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1137/bus") = 0 [pid 5052] umount2("./1137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1137/binderfs") = 0 [pid 5052] umount2("./1137/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1137/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1137/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1137/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1137/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 265.220363][T10416] loop0: detected capacity change from 0 to 512 [ 265.229390][T10416] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1137") = 0 [pid 5052] mkdir("./1138", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10418 attached [pid 10418] set_robust_list(0x555556d606a0, 24 [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10418 [pid 10418] <... set_robust_list resumed>) = 0 [pid 10418] chdir("./1138") = 0 [pid 10418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10418] setpgid(0, 0) = 0 [pid 10418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10418] write(3, "1000", 4) = 4 [pid 10418] close(3) = 0 [pid 10418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10418] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10418] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10418] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10419 attached [pid 10419] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10418] <... clone3 resumed> => {parent_tid=[10419]}, 88) = 10419 [pid 10419] <... rseq resumed>) = 0 [pid 10418] rt_sigprocmask(SIG_SETMASK, [], [pid 10419] set_robust_list(0x7f55300e29a0, 24 [pid 10418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10419] <... set_robust_list resumed>) = 0 [pid 10418] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10418] <... futex resumed>) = 0 [pid 10418] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10419] memfd_create("syzkaller", 0 [pid 10418] <... futex resumed>) = 0 [pid 10419] <... memfd_create resumed>) = 3 [pid 10419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5527ca1000 [pid 10418] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10420 attached => {parent_tid=[10420]}, 88) = 10420 [pid 10420] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10418] rt_sigprocmask(SIG_SETMASK, [], [pid 10420] <... rseq resumed>) = 0 [pid 10418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10420] set_robust_list(0x7f5527cc19a0, 24 [pid 10418] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10420] <... set_robust_list resumed>) = 0 [pid 10418] <... futex resumed>) = 0 [pid 10420] rt_sigprocmask(SIG_SETMASK, [], [pid 10418] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10420] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10420] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10420] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10418] <... futex resumed>) = 0 [pid 10419] <... write resumed>) = 262144 [pid 10420] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10418] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10418] <... futex resumed>) = 0 [pid 10420] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10418] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10420] <... mount resumed>) = 0 [pid 10419] munmap(0x7f5527cc2000, 262144 [pid 10420] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10418] <... futex resumed>) = 0 [pid 10420] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10418] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10418] <... futex resumed>) = 0 [pid 10420] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10419] <... munmap resumed>) = 0 [pid 10418] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10420] <... open resumed>) = 5 [pid 10419] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10420] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10420] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10419] <... openat resumed>) = 6 [pid 10419] ioctl(6, LOOP_SET_FD, 3 [pid 10418] <... futex resumed>) = 0 [pid 10418] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10418] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10420] <... futex resumed>) = 0 [pid 10420] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10419] <... ioctl resumed>) = 0 [pid 10419] close(3) = 0 [pid 10419] mkdir("./file1", 0777) = 0 [pid 10419] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10419] ioctl(6, LOOP_CLR_FD) = 0 [pid 10419] close(6 [pid 10420] <... write resumed>) = 262144 [pid 10420] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10418] <... futex resumed>) = 0 [pid 10420] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10419] <... close resumed>) = 0 [pid 10419] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10419] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10418] exit_group(0 [pid 10420] <... futex resumed>) = ? [pid 10419] <... futex resumed>) = ? [pid 10418] <... exit_group resumed>) = ? [pid 10420] +++ exited with 0 +++ [pid 10419] +++ exited with 0 +++ [pid 10418] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10418, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1138/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1138/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1138/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1138/bus") = 0 [pid 5052] umount2("./1138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1138/binderfs") = 0 [pid 5052] umount2("./1138/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1138/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1138/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1138/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 265.324362][T10419] loop0: detected capacity change from 0 to 512 [ 265.334156][T10419] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1138/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1138") = 0 [pid 5052] mkdir("./1139", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10421 attached , child_tidptr=0x555556d60690) = 10421 [pid 10421] set_robust_list(0x555556d606a0, 24) = 0 [pid 10421] chdir("./1139") = 0 [pid 10421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10421] setpgid(0, 0) = 0 [pid 10421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10421] write(3, "1000", 4) = 4 [pid 10421] close(3) = 0 [pid 10421] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10421] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10421] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10421] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10421] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10422 attached => {parent_tid=[10422]}, 88) = 10422 [pid 10421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10421] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10421] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10421] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10423 attached [pid 10423] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10421] <... clone3 resumed> => {parent_tid=[10423]}, 88) = 10423 [pid 10423] <... rseq resumed>) = 0 [pid 10423] set_robust_list(0x7f55300c19a0, 24 [pid 10421] rt_sigprocmask(SIG_SETMASK, [], [pid 10423] <... set_robust_list resumed>) = 0 [pid 10421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10423] rt_sigprocmask(SIG_SETMASK, [], [pid 10421] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10421] <... futex resumed>) = 0 [pid 10423] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10421] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10422] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10422] set_robust_list(0x7f55300e29a0, 24 [pid 10423] <... open resumed>) = 3 [pid 10422] <... set_robust_list resumed>) = 0 [pid 10423] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10421] <... futex resumed>) = 0 [pid 10423] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10421] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10421] <... futex resumed>) = 0 [pid 10423] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10421] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10423] <... mount resumed>) = 0 [pid 10423] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10421] <... futex resumed>) = 0 [pid 10421] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10421] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10423] <... futex resumed>) = 1 [pid 10423] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 4 [pid 10423] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10421] <... futex resumed>) = 0 [pid 10423] <... futex resumed>) = 1 [pid 10423] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10421] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10423] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10421] <... futex resumed>) = 0 [pid 10423] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10421] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10423] <... futex resumed>) = 0 [pid 10421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10423] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10422] memfd_create("syzkaller", 0) = 5 [pid 10422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10422] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10422] munmap(0x7f5527ca1000, 262144) = 0 [pid 10422] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10422] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 10422] close(5) = 0 [pid 10422] mkdir("./file1", 0777) = 0 [pid 10422] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10422] ioctl(6, LOOP_CLR_FD) = 0 [pid 10422] close(6) = 0 [pid 10422] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10421] exit_group(0 [pid 10422] <... futex resumed>) = 0 [pid 10421] <... exit_group resumed>) = ? [pid 10422] +++ exited with 0 +++ [pid 10423] <... futex resumed>) = ? [pid 10423] +++ exited with 0 +++ [pid 10421] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10421, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1139/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1139/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1139/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1139/bus") = 0 [pid 5052] umount2("./1139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1139/binderfs") = 0 [pid 5052] umount2("./1139/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1139/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1139/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1139/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1139/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1139") = 0 [pid 5052] mkdir("./1140", 0777) = 0 [ 265.446064][T10422] loop0: detected capacity change from 0 to 512 [ 265.456281][T10422] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10424 attached , child_tidptr=0x555556d60690) = 10424 [pid 10424] set_robust_list(0x555556d606a0, 24) = 0 [pid 10424] chdir("./1140") = 0 [pid 10424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10424] setpgid(0, 0) = 0 [pid 10424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10424] write(3, "1000", 4) = 4 [pid 10424] close(3) = 0 [pid 10424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10424] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10424] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10424] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10424] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10424] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10425 attached => {parent_tid=[10425]}, 88) = 10425 [pid 10425] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10424] rt_sigprocmask(SIG_SETMASK, [], [pid 10425] <... rseq resumed>) = 0 [pid 10424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10425] set_robust_list(0x7f55300e29a0, 24 [pid 10424] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10425] <... set_robust_list resumed>) = 0 [pid 10424] <... futex resumed>) = 0 [pid 10425] rt_sigprocmask(SIG_SETMASK, [], [pid 10424] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10424] <... futex resumed>) = 0 [pid 10425] memfd_create("syzkaller", 0 [pid 10424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10424] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10425] <... memfd_create resumed>) = 3 [pid 10424] <... mprotect resumed>) = 0 [pid 10425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10424] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10426]}, 88) = 10426 [pid 10424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10424] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10424] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10426 attached [pid 10426] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10426] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10426] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10425] <... write resumed>) = 262144 [pid 10425] munmap(0x7f5527ca1000, 262144) = 0 [pid 10425] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10426] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10424] <... futex resumed>) = 0 [pid 10426] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10424] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10426] <... futex resumed>) = 0 [pid 10424] <... futex resumed>) = 1 [pid 10426] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10424] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10425] <... openat resumed>) = 5 [pid 10425] ioctl(5, LOOP_SET_FD, 3 [pid 10426] <... mount resumed>) = 0 [pid 10426] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10425] <... ioctl resumed>) = 0 [pid 10425] close(3) = 0 [pid 10425] mkdir("./file1", 0777 [pid 10426] <... futex resumed>) = 1 [pid 10426] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10424] <... futex resumed>) = 0 [pid 10424] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10426] <... futex resumed>) = 0 [pid 10424] <... futex resumed>) = 1 [pid 10426] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10424] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10426] <... open resumed>) = 3 [pid 10426] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10426] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10424] <... futex resumed>) = 0 [pid 10424] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10426] <... futex resumed>) = 0 [pid 10424] <... futex resumed>) = 1 [pid 10426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10424] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10425] <... mkdir resumed>) = 0 [pid 10425] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10425] ioctl(5, LOOP_CLR_FD) = 0 [pid 10425] close(5) = 0 [pid 10425] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10425] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10426] <... write resumed>) = 262144 [pid 10426] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10424] <... futex resumed>) = 0 [pid 10424] exit_group(0) = ? [pid 10425] <... futex resumed>) = ? [pid 10425] +++ exited with 0 +++ [pid 10426] <... futex resumed>) = ? [pid 10426] +++ exited with 0 +++ [pid 10424] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10424, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1140/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1140/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1140/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1140/bus") = 0 [pid 5052] umount2("./1140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1140/binderfs") = 0 [pid 5052] umount2("./1140/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1140/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1140/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1140/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1140/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1140") = 0 [pid 5052] mkdir("./1141", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 265.546319][T10425] loop0: detected capacity change from 0 to 512 [ 265.560612][T10425] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10427 attached [pid 10427] set_robust_list(0x555556d606a0, 24) = 0 [pid 10427] chdir("./1141" [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10427 [pid 10427] <... chdir resumed>) = 0 [pid 10427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10427] setpgid(0, 0) = 0 [pid 10427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10427] write(3, "1000", 4) = 4 [pid 10427] close(3) = 0 [pid 10427] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10427] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10427] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10427] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10428 attached => {parent_tid=[10428]}, 88) = 10428 [pid 10428] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10427] rt_sigprocmask(SIG_SETMASK, [], [pid 10428] set_robust_list(0x7f55300e29a0, 24 [pid 10427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10428] <... set_robust_list resumed>) = 0 [pid 10427] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10427] <... futex resumed>) = 0 [pid 10428] memfd_create("syzkaller", 0 [pid 10427] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10428] <... memfd_create resumed>) = 3 [pid 10427] <... mmap resumed>) = 0x7f55300a1000 [pid 10428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10427] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10429]}, 88) = 10429 [pid 10427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10427] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10429 attached [pid 10429] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10427] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10429] <... rseq resumed>) = 0 [pid 10429] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10429] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10429] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10429] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10427] <... futex resumed>) = 0 [pid 10427] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10429] <... futex resumed>) = 0 [pid 10429] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10429] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10429] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10427] <... futex resumed>) = 1 [pid 10427] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10427] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10429] <... futex resumed>) = 0 [pid 10429] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10429] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10427] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10429] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10427] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10429] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10427] <... futex resumed>) = 0 [pid 10429] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10427] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10429] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10428] munmap(0x7f5527ca1000, 262144 [pid 10427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10429] <... futex resumed>) = 0 [pid 10428] <... munmap resumed>) = 0 [pid 10429] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10428] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10428] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10428] close(3) = 0 [pid 10428] mkdir("./file1", 0777) = 0 [pid 10428] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10428] ioctl(6, LOOP_CLR_FD) = 0 [pid 10428] close(6) = 0 [pid 10428] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10427] exit_group(0 [pid 10428] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10427] <... exit_group resumed>) = ? [pid 10428] <... futex resumed>) = ? [pid 10428] +++ exited with 0 +++ [pid 10429] <... futex resumed>) = ? [pid 10429] +++ exited with 0 +++ [pid 10427] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10427, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1141/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1141/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1141/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1141/bus") = 0 [pid 5052] umount2("./1141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1141/binderfs") = 0 [pid 5052] umount2("./1141/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1141/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1141/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1141/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1141/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1141") = 0 [ 265.645235][T10428] loop0: detected capacity change from 0 to 512 [ 265.656028][T10428] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1142", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10430 attached , child_tidptr=0x555556d60690) = 10430 [pid 10430] set_robust_list(0x555556d606a0, 24) = 0 [pid 10430] chdir("./1142") = 0 [pid 10430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10430] setpgid(0, 0) = 0 [pid 10430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10430] write(3, "1000", 4) = 4 [pid 10430] close(3) = 0 [pid 10430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10430] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10430] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10430] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10430] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10431 attached => {parent_tid=[10431]}, 88) = 10431 [pid 10430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10430] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10430] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10430] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10431] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10430] <... mprotect resumed>) = 0 [pid 10431] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10431] rt_sigprocmask(SIG_SETMASK, [], [pid 10430] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10430] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10431] memfd_create("syzkaller", 0./strace-static-x86_64: Process 10432 attached ) = 3 [pid 10430] <... clone3 resumed> => {parent_tid=[10432]}, 88) = 10432 [pid 10430] rt_sigprocmask(SIG_SETMASK, [], [pid 10432] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10430] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10432] <... rseq resumed>) = 0 [pid 10431] <... mmap resumed>) = 0x7f5527ca1000 [pid 10430] <... futex resumed>) = 0 [pid 10430] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10432] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10432] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10431] <... write resumed>) = 262144 [pid 10432] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10432] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10430] <... futex resumed>) = 0 [pid 10430] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10432] <... futex resumed>) = 0 [pid 10430] <... futex resumed>) = 1 [pid 10432] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10431] munmap(0x7f5527ca1000, 262144 [pid 10432] <... mount resumed>) = 0 [pid 10431] <... munmap resumed>) = 0 [pid 10430] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10432] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10432] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10430] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10432] <... futex resumed>) = 0 [pid 10430] <... futex resumed>) = 1 [pid 10432] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10430] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10431] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10432] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10431] <... openat resumed>) = 6 [pid 10430] <... futex resumed>) = 0 [pid 10430] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10430] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10431] ioctl(6, LOOP_SET_FD, 3 [pid 10432] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10432] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10430] <... futex resumed>) = 0 [pid 10431] <... ioctl resumed>) = 0 [pid 10432] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10431] close(3) = 0 [pid 10431] mkdir("./file1", 0777) = 0 [pid 10431] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10431] ioctl(6, LOOP_CLR_FD) = 0 [pid 10431] close(6) = 0 [pid 10431] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10431] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10430] exit_group(0 [pid 10432] <... futex resumed>) = ? [pid 10432] +++ exited with 0 +++ [pid 10431] <... futex resumed>) = ? [pid 10430] <... exit_group resumed>) = ? [pid 10431] +++ exited with 0 +++ [pid 10430] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10430, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1142/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1142/bus") = 0 [pid 5052] umount2("./1142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1142/binderfs") = 0 [pid 5052] umount2("./1142/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1142/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1142/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1142/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1142/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1142") = 0 [pid 5052] mkdir("./1143", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10433 attached [ 265.761876][T10431] loop0: detected capacity change from 0 to 512 [ 265.772687][T10431] ext4: Unknown parameter 'nouser_xattr' , child_tidptr=0x555556d60690) = 10433 [pid 10433] set_robust_list(0x555556d606a0, 24) = 0 [pid 10433] chdir("./1143") = 0 [pid 10433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10433] setpgid(0, 0) = 0 [pid 10433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10433] write(3, "1000", 4) = 4 [pid 10433] close(3) = 0 [pid 10433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10433] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10433] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10433] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10433] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10434 attached [pid 10434] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10433] <... clone3 resumed> => {parent_tid=[10434]}, 88) = 10434 [pid 10434] set_robust_list(0x7f55300e29a0, 24 [pid 10433] rt_sigprocmask(SIG_SETMASK, [], [pid 10434] <... set_robust_list resumed>) = 0 [pid 10433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10434] rt_sigprocmask(SIG_SETMASK, [], [pid 10433] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10433] <... futex resumed>) = 0 [pid 10433] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10434] memfd_create("syzkaller", 0 [pid 10433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10434] <... memfd_create resumed>) = 3 [pid 10433] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10433] <... mprotect resumed>) = 0 [pid 10434] <... mmap resumed>) = 0x7f5527ca1000 [pid 10433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10435 attached [pid 10435] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10435] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10435] rt_sigprocmask(SIG_SETMASK, [], [pid 10433] <... clone3 resumed> => {parent_tid=[10435]}, 88) = 10435 [pid 10435] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10435] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10433] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10435] <... futex resumed>) = 0 [pid 10433] <... futex resumed>) = 1 [pid 10435] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10433] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10435] <... open resumed>) = 4 [pid 10435] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10433] <... futex resumed>) = 0 [pid 10433] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10433] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10435] <... futex resumed>) = 1 [pid 10435] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10435] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10433] <... futex resumed>) = 0 [pid 10435] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10433] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10433] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10435] <... open resumed>) = 5 [pid 10434] <... write resumed>) = 262144 [pid 10434] munmap(0x7f5527ca1000, 262144 [pid 10435] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10433] <... futex resumed>) = 0 [pid 10433] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10435] <... futex resumed>) = 1 [pid 10433] <... futex resumed>) = 0 [pid 10435] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10433] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10435] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10435] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10433] <... futex resumed>) = 0 [pid 10435] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10434] <... munmap resumed>) = 0 [pid 10434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10434] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10434] close(3) = 0 [pid 10434] mkdir("./file1", 0777) = 0 [pid 10434] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10434] ioctl(6, LOOP_CLR_FD) = 0 [pid 10434] close(6) = 0 [pid 10434] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10433] exit_group(0 [pid 10434] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 10434] +++ exited with 0 +++ [pid 10435] <... futex resumed>) = ? [pid 10435] +++ exited with 0 +++ [pid 10433] <... exit_group resumed>) = ? [pid 10433] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10433, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1143/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1143/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1143/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1143/bus") = 0 [pid 5052] umount2("./1143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1143/binderfs") = 0 [pid 5052] umount2("./1143/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1143/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1143/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1143/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1143/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1143") = 0 [pid 5052] mkdir("./1144", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 265.864121][T10434] loop0: detected capacity change from 0 to 512 [ 265.874021][T10434] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10436 attached [pid 10436] set_robust_list(0x555556d606a0, 24 [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10436 [pid 10436] <... set_robust_list resumed>) = 0 [pid 10436] chdir("./1144") = 0 [pid 10436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10436] setpgid(0, 0) = 0 [pid 10436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10436] write(3, "1000", 4) = 4 [pid 10436] close(3) = 0 [pid 10436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10436] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10436] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10436] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10437 attached [pid 10437] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10436] <... clone3 resumed> => {parent_tid=[10437]}, 88) = 10437 [pid 10437] <... rseq resumed>) = 0 [pid 10436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10437] set_robust_list(0x7f55300e29a0, 24 [pid 10436] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10436] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10436] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10438 attached [pid 10438] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10438] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10437] <... set_robust_list resumed>) = 0 [pid 10438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10436] <... clone3 resumed> => {parent_tid=[10438]}, 88) = 10438 [pid 10438] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10437] rt_sigprocmask(SIG_SETMASK, [], [pid 10436] rt_sigprocmask(SIG_SETMASK, [], [pid 10437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10436] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10437] memfd_create("syzkaller", 0 [pid 10438] <... futex resumed>) = 0 [pid 10436] <... futex resumed>) = 1 [pid 10438] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10437] <... memfd_create resumed>) = 3 [pid 10438] <... open resumed>) = 4 [pid 10436] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10438] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10436] <... futex resumed>) = 0 [pid 10436] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10436] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10438] <... futex resumed>) = 1 [pid 10438] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10438] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10436] <... futex resumed>) = 0 [pid 10436] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10438] <... futex resumed>) = 1 [pid 10436] <... futex resumed>) = 0 [pid 10438] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10436] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10438] <... open resumed>) = 5 [pid 10438] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10436] <... futex resumed>) = 0 [pid 10438] <... futex resumed>) = 1 [pid 10436] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10438] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10436] <... futex resumed>) = 0 [pid 10436] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10438] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10438] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10436] <... futex resumed>) = 0 [pid 10438] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10437] <... mmap resumed>) = 0x7f5527ca1000 [pid 10437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10437] munmap(0x7f5527ca1000, 262144) = 0 [pid 10437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10437] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10437] close(3) = 0 [pid 10437] mkdir("./file1", 0777) = 0 [pid 10437] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10437] ioctl(6, LOOP_CLR_FD) = 0 [pid 10437] close(6) = 0 [pid 10437] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10436] exit_group(0 [pid 10438] <... futex resumed>) = ? [pid 10437] <... futex resumed>) = ? [pid 10436] <... exit_group resumed>) = ? [pid 10438] +++ exited with 0 +++ [pid 10437] +++ exited with 0 +++ [pid 10436] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10436, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1144/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1144/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1144/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1144/bus") = 0 [pid 5052] umount2("./1144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1144/binderfs") = 0 [ 265.982038][T10437] loop0: detected capacity change from 0 to 512 [ 265.995527][T10437] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1144/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1144/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1144/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1144/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1144/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1144") = 0 [pid 5052] mkdir("./1145", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10439 ./strace-static-x86_64: Process 10439 attached [pid 10439] set_robust_list(0x555556d606a0, 24) = 0 [pid 10439] chdir("./1145") = 0 [pid 10439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10439] setpgid(0, 0) = 0 [pid 10439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10439] write(3, "1000", 4) = 4 [pid 10439] close(3) = 0 [pid 10439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10439] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10439] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10439] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10439] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10440 attached => {parent_tid=[10440]}, 88) = 10440 [pid 10439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10439] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10439] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10439] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10439] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10440] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10440] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10439] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10440] memfd_create("syzkaller", 0./strace-static-x86_64: Process 10441 attached ) = 3 [pid 10439] <... clone3 resumed> => {parent_tid=[10441]}, 88) = 10441 [pid 10441] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10439] rt_sigprocmask(SIG_SETMASK, [], [pid 10441] <... rseq resumed>) = 0 [pid 10439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10441] set_robust_list(0x7f55300c19a0, 24 [pid 10440] <... mmap resumed>) = 0x7f5527ca1000 [pid 10439] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10439] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10441] <... set_robust_list resumed>) = 0 [pid 10441] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10441] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10441] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10439] <... futex resumed>) = 0 [pid 10441] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10439] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10441] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10439] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10441] <... mount resumed>) = 0 [pid 10440] <... write resumed>) = 262144 [pid 10441] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10439] <... futex resumed>) = 0 [pid 10439] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10439] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10441] <... futex resumed>) = 1 [pid 10441] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10441] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10439] <... futex resumed>) = 0 [pid 10439] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10441] <... futex resumed>) = 1 [pid 10439] <... futex resumed>) = 0 [pid 10441] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10439] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10441] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10441] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10439] <... futex resumed>) = 0 [pid 10441] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10440] munmap(0x7f5527ca1000, 262144) = 0 [pid 10440] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10440] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10440] close(3) = 0 [pid 10440] mkdir("./file1", 0777) = 0 [pid 10440] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10440] ioctl(6, LOOP_CLR_FD) = 0 [pid 10440] close(6) = 0 [pid 10440] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10440] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10439] exit_group(0 [pid 10441] <... futex resumed>) = ? [pid 10440] <... futex resumed>) = ? [pid 10439] <... exit_group resumed>) = ? [pid 10440] +++ exited with 0 +++ [pid 10441] +++ exited with 0 +++ [pid 10439] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10439, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1145/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1145/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1145/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1145/bus") = 0 [pid 5052] umount2("./1145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1145/binderfs") = 0 [pid 5052] umount2("./1145/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1145/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 266.129833][T10440] loop0: detected capacity change from 0 to 512 [ 266.144243][T10440] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1145/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1145/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1145/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1145") = 0 [pid 5052] mkdir("./1146", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10442 ./strace-static-x86_64: Process 10442 attached [pid 10442] set_robust_list(0x555556d606a0, 24) = 0 [pid 10442] chdir("./1146") = 0 [pid 10442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10442] setpgid(0, 0) = 0 [pid 10442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10442] write(3, "1000", 4) = 4 [pid 10442] close(3) = 0 [pid 10442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10442] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10442] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10442] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10443 attached => {parent_tid=[10443]}, 88) = 10443 [pid 10443] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10442] rt_sigprocmask(SIG_SETMASK, [], [pid 10443] <... rseq resumed>) = 0 [pid 10442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10443] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10442] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10443] rt_sigprocmask(SIG_SETMASK, [], [pid 10442] <... futex resumed>) = 0 [pid 10443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10443] memfd_create("syzkaller", 0 [pid 10442] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10443] <... memfd_create resumed>) = 3 [pid 10442] <... mmap resumed>) = 0x7f55300a1000 [pid 10443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10442] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10443] <... mmap resumed>) = 0x7f5527ca1000 [pid 10442] <... mprotect resumed>) = 0 [pid 10442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10444 attached [pid 10443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10444] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10444] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10444] rt_sigprocmask(SIG_SETMASK, [], [pid 10442] <... clone3 resumed> => {parent_tid=[10444]}, 88) = 10444 [pid 10444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10444] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10442] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10444] <... futex resumed>) = 0 [pid 10442] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10444] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10444] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10442] <... futex resumed>) = 0 [pid 10442] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10442] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10443] <... write resumed>) = 262144 [pid 10444] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10443] munmap(0x7f5527ca1000, 262144 [pid 10444] <... mount resumed>) = 0 [pid 10444] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10444] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10442] <... futex resumed>) = 0 [pid 10442] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10444] <... futex resumed>) = 0 [pid 10442] <... futex resumed>) = 1 [pid 10444] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10442] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10444] <... open resumed>) = 5 [pid 10444] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10444] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10442] <... futex resumed>) = 0 [pid 10442] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10444] <... futex resumed>) = 0 [pid 10442] <... futex resumed>) = 1 [pid 10444] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10442] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10444] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10444] <... futex resumed>) = 0 [pid 10444] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10443] <... munmap resumed>) = 0 [pid 10443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10443] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10443] close(3) = 0 [pid 10443] mkdir("./file1", 0777) = 0 [pid 10443] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10443] ioctl(6, LOOP_CLR_FD) = 0 [pid 10443] close(6) = 0 [pid 10443] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10443] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10442] exit_group(0 [pid 10444] <... futex resumed>) = ? [pid 10443] <... futex resumed>) = ? [pid 10442] <... exit_group resumed>) = ? [pid 10444] +++ exited with 0 +++ [pid 10443] +++ exited with 0 +++ [pid 10442] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10442, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1146/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1146/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1146/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1146/bus") = 0 [pid 5052] umount2("./1146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1146/binderfs") = 0 [pid 5052] umount2("./1146/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1146/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1146/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 266.279107][T10443] loop0: detected capacity change from 0 to 512 [ 266.291858][T10443] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "./1146/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1146/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1146") = 0 [pid 5052] mkdir("./1147", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10445 attached , child_tidptr=0x555556d60690) = 10445 [pid 10445] set_robust_list(0x555556d606a0, 24) = 0 [pid 10445] chdir("./1147") = 0 [pid 10445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10445] setpgid(0, 0) = 0 [pid 10445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10445] write(3, "1000", 4) = 4 [pid 10445] close(3) = 0 [pid 10445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10445] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10445] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10445] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10445] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10446]}, 88) = 10446 [pid 10445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10445] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10445] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 ./strace-static-x86_64: Process 10446 attached [pid 10445] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10447 attached [pid 10447] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10447] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10445] <... clone3 resumed> => {parent_tid=[10447]}, 88) = 10447 [pid 10447] rt_sigprocmask(SIG_SETMASK, [], [pid 10445] rt_sigprocmask(SIG_SETMASK, [], [pid 10447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10447] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10445] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10447] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10445] <... futex resumed>) = 0 [pid 10447] <... open resumed>) = 3 [pid 10446] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10445] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10446] <... rseq resumed>) = 0 [pid 10447] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10445] <... futex resumed>) = 0 [pid 10445] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10445] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10447] <... futex resumed>) = 1 [pid 10447] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10446] set_robust_list(0x7f55300e29a0, 24 [pid 10447] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10445] <... futex resumed>) = 0 [pid 10446] <... set_robust_list resumed>) = 0 [pid 10446] rt_sigprocmask(SIG_SETMASK, [], [pid 10445] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10447] <... futex resumed>) = 1 [pid 10446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10445] <... futex resumed>) = 0 [pid 10447] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10445] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10446] memfd_create("syzkaller", 0 [pid 10447] <... open resumed>) = 5 [pid 10446] <... memfd_create resumed>) = 4 [pid 10446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10447] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10445] <... futex resumed>) = 0 [pid 10445] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10447] <... futex resumed>) = 1 [pid 10446] <... mmap resumed>) = 0x7f5527ca1000 [pid 10445] <... futex resumed>) = 0 [pid 10447] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10445] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10447] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10447] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10445] <... futex resumed>) = 0 [pid 10447] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10446] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10446] munmap(0x7f5527ca1000, 262144) = 0 [pid 10446] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10446] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10446] close(4) = 0 [pid 10446] mkdir("./file1", 0777) = 0 [pid 10446] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10446] ioctl(6, LOOP_CLR_FD) = 0 [pid 10446] close(6) = 0 [pid 10446] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10446] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10445] exit_group(0 [pid 10446] <... futex resumed>) = ? [pid 10446] +++ exited with 0 +++ [pid 10445] <... exit_group resumed>) = ? [pid 10447] <... futex resumed>) = ? [pid 10447] +++ exited with 0 +++ [pid 10445] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10445, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1147/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1147/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1147/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1147/bus") = 0 [pid 5052] umount2("./1147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1147/binderfs") = 0 [pid 5052] umount2("./1147/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1147/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1147/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1147/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1147/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [ 266.402309][T10446] loop0: detected capacity change from 0 to 512 [ 266.412646][T10446] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(3) = 0 [pid 5052] rmdir("./1147") = 0 [pid 5052] mkdir("./1148", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10448 attached , child_tidptr=0x555556d60690) = 10448 [pid 10448] set_robust_list(0x555556d606a0, 24) = 0 [pid 10448] chdir("./1148") = 0 [pid 10448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10448] setpgid(0, 0) = 0 [pid 10448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10448] write(3, "1000", 4) = 4 [pid 10448] close(3) = 0 [pid 10448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10448] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10448] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10448] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10449]}, 88) = 10449 ./strace-static-x86_64: Process 10449 attached [pid 10449] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10448] rt_sigprocmask(SIG_SETMASK, [], [pid 10449] <... rseq resumed>) = 0 [pid 10449] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10449] rt_sigprocmask(SIG_SETMASK, [], [pid 10448] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10448] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10448] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10448] <... mprotect resumed>) = 0 [pid 10449] memfd_create("syzkaller", 0 [pid 10448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10449] <... memfd_create resumed>) = 3 [pid 10449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10450 attached [pid 10449] <... mmap resumed>) = 0x7f5527ca1000 [pid 10448] <... clone3 resumed> => {parent_tid=[10450]}, 88) = 10450 [pid 10450] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10448] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10448] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10450] <... rseq resumed>) = 0 [pid 10449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10450] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10450] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10449] <... write resumed>) = 262144 [pid 10449] munmap(0x7f5527ca1000, 262144 [pid 10450] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10448] <... futex resumed>) = 0 [pid 10448] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10450] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10448] <... futex resumed>) = 0 [pid 10449] <... munmap resumed>) = 0 [pid 10448] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10450] <... mount resumed>) = 0 [pid 10449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10449] ioctl(5, LOOP_SET_FD, 3 [pid 10450] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10448] <... futex resumed>) = 0 [pid 10450] <... futex resumed>) = 1 [pid 10448] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10450] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10448] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10450] <... open resumed>) = 6 [pid 10450] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10448] <... futex resumed>) = 0 [pid 10448] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10450] <... futex resumed>) = 1 [pid 10448] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10450] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10449] <... ioctl resumed>) = 0 [pid 10449] close(3) = 0 [pid 10449] mkdir("./file1", 0777) = 0 [pid 10449] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10450] <... write resumed>) = 262144 [pid 10449] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10450] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10448] <... futex resumed>) = 0 [pid 10450] <... futex resumed>) = 1 [pid 10450] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10449] ioctl(5, LOOP_CLR_FD) = 0 [pid 10449] close(5) = 0 [pid 10449] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10449] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10448] exit_group(0 [pid 10449] <... futex resumed>) = ? [pid 10449] +++ exited with 0 +++ [pid 10448] <... exit_group resumed>) = ? [pid 10450] <... futex resumed>) = ? [pid 10450] +++ exited with 0 +++ [pid 10448] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10448, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1148/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1148/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1148/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1148/bus") = 0 [pid 5052] umount2("./1148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1148/binderfs") = 0 [pid 5052] umount2("./1148/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1148/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1148/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1148/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 266.519230][T10449] loop0: detected capacity change from 0 to 512 [ 266.531382][T10449] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1148/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1148") = 0 [pid 5052] mkdir("./1149", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10451 attached , child_tidptr=0x555556d60690) = 10451 [pid 10451] set_robust_list(0x555556d606a0, 24) = 0 [pid 10451] chdir("./1149") = 0 [pid 10451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10451] setpgid(0, 0) = 0 [pid 10451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10451] write(3, "1000", 4) = 4 [pid 10451] close(3) = 0 [pid 10451] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10451] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10451] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10451] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10451] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10451] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10451] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10452 attached => {parent_tid=[10452]}, 88) = 10452 [pid 10451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10451] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10451] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10451] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10451] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10452] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10451] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10452] set_robust_list(0x7f55300e29a0, 24 [pid 10451] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10453 attached [pid 10453] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10451] <... clone3 resumed> => {parent_tid=[10453]}, 88) = 10453 [pid 10453] <... rseq resumed>) = 0 [pid 10453] set_robust_list(0x7f55300c19a0, 24 [pid 10451] rt_sigprocmask(SIG_SETMASK, [], [pid 10453] <... set_robust_list resumed>) = 0 [pid 10452] <... set_robust_list resumed>) = 0 [pid 10451] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10453] rt_sigprocmask(SIG_SETMASK, [], [pid 10451] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10453] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10452] rt_sigprocmask(SIG_SETMASK, [], [pid 10451] <... futex resumed>) = 0 [pid 10453] <... open resumed>) = 3 [pid 10451] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10453] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10451] <... futex resumed>) = 0 [pid 10451] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10451] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10453] <... futex resumed>) = 1 [pid 10453] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10453] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10451] <... futex resumed>) = 0 [pid 10451] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10453] <... futex resumed>) = 1 [pid 10451] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10453] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 4 [pid 10453] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10451] <... futex resumed>) = 0 [pid 10453] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10451] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10451] <... futex resumed>) = 0 [pid 10453] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10451] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10453] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10453] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10451] <... futex resumed>) = 0 [pid 10453] <... futex resumed>) = 1 [pid 10453] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10452] memfd_create("syzkaller", 0) = 5 [pid 10452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10452] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10452] munmap(0x7f5527ca1000, 262144) = 0 [pid 10452] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10452] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 10452] close(5) = 0 [pid 10452] mkdir("./file1", 0777) = 0 [pid 10452] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10452] ioctl(6, LOOP_CLR_FD) = 0 [pid 10452] close(6) = 0 [pid 10452] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10452] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10451] exit_group(0 [pid 10453] <... futex resumed>) = ? [pid 10451] <... exit_group resumed>) = ? [pid 10452] <... futex resumed>) = ? [pid 10452] +++ exited with 0 +++ [pid 10453] +++ exited with 0 +++ [pid 10451] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10451, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1149/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1149/bus") = 0 [pid 5052] umount2("./1149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1149/binderfs") = 0 [pid 5052] umount2("./1149/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1149/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1149/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1149/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1149/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1149") = 0 [pid 5052] mkdir("./1150", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 266.632688][T10452] loop0: detected capacity change from 0 to 512 [ 266.641872][T10452] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10454 attached [pid 10454] set_robust_list(0x555556d606a0, 24) = 0 [pid 10454] chdir("./1150" [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10454 [pid 10454] <... chdir resumed>) = 0 [pid 10454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10454] setpgid(0, 0) = 0 [pid 10454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10454] write(3, "1000", 4) = 4 [pid 10454] close(3) = 0 [pid 10454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10454] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10454] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10454] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10454] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10454] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10454] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10455 attached [pid 10455] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10454] <... clone3 resumed> => {parent_tid=[10455]}, 88) = 10455 [pid 10455] <... rseq resumed>) = 0 [pid 10455] set_robust_list(0x7f55300e29a0, 24 [pid 10454] rt_sigprocmask(SIG_SETMASK, [], [pid 10455] <... set_robust_list resumed>) = 0 [pid 10454] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10455] rt_sigprocmask(SIG_SETMASK, [], [pid 10454] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10454] <... futex resumed>) = 0 [pid 10455] memfd_create("syzkaller", 0 [pid 10454] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10455] <... memfd_create resumed>) = 3 [pid 10454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10454] <... mmap resumed>) = 0x7f55300a1000 [pid 10454] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10454] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10454] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10456 attached [pid 10455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10456] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10456] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10456] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10454] <... clone3 resumed> => {parent_tid=[10456]}, 88) = 10456 [pid 10455] <... write resumed>) = 262144 [pid 10454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10454] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10455] munmap(0x7f5527ca1000, 262144 [pid 10454] <... futex resumed>) = 1 [pid 10456] <... futex resumed>) = 0 [pid 10456] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10454] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10455] <... munmap resumed>) = 0 [pid 10455] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10455] ioctl(5, LOOP_SET_FD, 3 [pid 10456] <... open resumed>) = 4 [pid 10456] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10454] <... futex resumed>) = 0 [pid 10454] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10456] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10454] <... futex resumed>) = 0 [pid 10456] <... mount resumed>) = 0 [pid 10454] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10456] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10454] <... futex resumed>) = 0 [pid 10454] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10456] <... futex resumed>) = 1 [pid 10454] <... futex resumed>) = 0 [pid 10456] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10454] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10456] <... open resumed>) = 6 [pid 10456] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10455] <... ioctl resumed>) = 0 [pid 10456] <... futex resumed>) = 1 [pid 10455] close(3 [pid 10456] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10455] <... close resumed>) = 0 [pid 10455] mkdir("./file1", 0777) = 0 [pid 10454] <... futex resumed>) = 0 [pid 10454] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10456] <... futex resumed>) = 0 [pid 10455] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10454] <... futex resumed>) = 1 [pid 10456] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10454] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10455] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10455] ioctl(5, LOOP_CLR_FD) = 0 [pid 10455] close(5) = 0 [pid 10455] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10455] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10456] <... write resumed>) = 262144 [pid 10456] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10456] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10454] <... futex resumed>) = 0 [pid 10454] exit_group(0 [pid 10456] <... futex resumed>) = ? [pid 10455] <... futex resumed>) = ? [pid 10454] <... exit_group resumed>) = ? [pid 10456] +++ exited with 0 +++ [pid 10455] +++ exited with 0 +++ [pid 10454] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10454, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1150/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1150/bus") = 0 [pid 5052] umount2("./1150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1150/binderfs") = 0 [pid 5052] umount2("./1150/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1150/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1150/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1150/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 266.733146][T10455] loop0: detected capacity change from 0 to 512 [ 266.743180][T10455] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1150/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1150") = 0 [pid 5052] mkdir("./1151", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10457 attached , child_tidptr=0x555556d60690) = 10457 [pid 10457] set_robust_list(0x555556d606a0, 24) = 0 [pid 10457] chdir("./1151") = 0 [pid 10457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10457] setpgid(0, 0) = 0 [pid 10457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10457] write(3, "1000", 4) = 4 [pid 10457] close(3) = 0 [pid 10457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10457] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10457] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10457] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10457] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10457] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10458 attached => {parent_tid=[10458]}, 88) = 10458 [pid 10458] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10457] rt_sigprocmask(SIG_SETMASK, [], [pid 10458] <... rseq resumed>) = 0 [pid 10458] set_robust_list(0x7f55300e29a0, 24 [pid 10457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10458] <... set_robust_list resumed>) = 0 [pid 10457] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10458] rt_sigprocmask(SIG_SETMASK, [], [pid 10457] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10457] <... futex resumed>) = 0 [pid 10458] memfd_create("syzkaller", 0 [pid 10457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10458] <... memfd_create resumed>) = 3 [pid 10457] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10457] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10459]}, 88) = 10459 [pid 10457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10457] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10457] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10459 attached [pid 10458] <... write resumed>) = 262144 [pid 10458] munmap(0x7f5527ca1000, 262144 [pid 10459] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10459] set_robust_list(0x7f55300c19a0, 24 [pid 10458] <... munmap resumed>) = 0 [pid 10459] <... set_robust_list resumed>) = 0 [pid 10459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10458] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10459] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10458] <... openat resumed>) = 4 [pid 10458] ioctl(4, LOOP_SET_FD, 3 [pid 10459] <... open resumed>) = 5 [pid 10458] <... ioctl resumed>) = 0 [pid 10458] close(3) = 0 [pid 10458] mkdir("./file1", 0777 [pid 10459] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10457] <... futex resumed>) = 0 [pid 10459] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10457] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10459] <... futex resumed>) = 0 [pid 10457] <... futex resumed>) = 1 [pid 10459] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10457] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10459] <... mount resumed>) = 0 [pid 10458] <... mkdir resumed>) = 0 [pid 10459] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10458] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10459] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10457] <... futex resumed>) = 0 [pid 10457] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10459] <... futex resumed>) = 0 [pid 10457] <... futex resumed>) = 1 [pid 10457] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10459] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10458] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10458] ioctl(4, LOOP_CLR_FD) = 0 [pid 10458] close(4) = 0 [pid 10458] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10459] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10458] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10459] <... futex resumed>) = 1 [pid 10457] <... futex resumed>) = 0 [pid 10459] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10457] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10457] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10458] <... futex resumed>) = 0 [pid 10458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 10458] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10457] <... futex resumed>) = 0 [pid 10458] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10457] exit_group(0) = ? [pid 10459] <... futex resumed>) = ? [pid 10458] <... futex resumed>) = ? [pid 10459] +++ exited with 0 +++ [pid 10458] +++ exited with 0 +++ [pid 10457] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10457, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1151/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1151/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1151/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1151/bus") = 0 [pid 5052] umount2("./1151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1151/binderfs") = 0 [ 266.848321][T10458] loop0: detected capacity change from 0 to 512 [ 266.860481][T10458] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1151/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1151/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1151/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1151/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1151/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1151") = 0 [pid 5052] mkdir("./1152", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10460 ./strace-static-x86_64: Process 10460 attached [pid 10460] set_robust_list(0x555556d606a0, 24) = 0 [pid 10460] chdir("./1152") = 0 [pid 10460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10460] setpgid(0, 0) = 0 [pid 10460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10460] write(3, "1000", 4) = 4 [pid 10460] close(3) = 0 [pid 10460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10460] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10460] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10460] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10460] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10460] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10461 attached => {parent_tid=[10461]}, 88) = 10461 [pid 10461] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10460] rt_sigprocmask(SIG_SETMASK, [], [pid 10461] <... rseq resumed>) = 0 [pid 10461] set_robust_list(0x7f55300e29a0, 24 [pid 10460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10461] <... set_robust_list resumed>) = 0 [pid 10460] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10461] rt_sigprocmask(SIG_SETMASK, [], [pid 10460] <... futex resumed>) = 0 [pid 10461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10460] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10461] memfd_create("syzkaller", 0) = 3 [pid 10460] <... futex resumed>) = 0 [pid 10460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10460] <... mmap resumed>) = 0x7f55300a1000 [pid 10461] <... mmap resumed>) = 0x7f5527ca1000 [pid 10460] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10460] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10462]}, 88) = 10462 [pid 10460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10460] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10460] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10462 attached [pid 10462] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10462] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10462] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10462] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10460] <... futex resumed>) = 0 [pid 10460] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10462] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10460] <... futex resumed>) = 0 [pid 10462] <... mount resumed>) = 0 [pid 10460] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10462] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10460] <... futex resumed>) = 0 [pid 10460] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10462] <... futex resumed>) = 1 [pid 10460] <... futex resumed>) = 0 [pid 10460] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10462] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10462] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10460] <... futex resumed>) = 0 [pid 10462] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10460] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10461] <... write resumed>) = 262144 [pid 10460] <... futex resumed>) = 0 [pid 10462] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10460] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10461] munmap(0x7f5527ca1000, 262144 [pid 10462] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10462] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10460] <... futex resumed>) = 0 [pid 10462] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10461] <... munmap resumed>) = 0 [pid 10461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10461] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10461] close(3) = 0 [pid 10461] mkdir("./file1", 0777) = 0 [pid 10461] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10461] ioctl(6, LOOP_CLR_FD) = 0 [pid 10461] close(6) = 0 [pid 10461] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10461] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10460] exit_group(0 [pid 10462] <... futex resumed>) = ? [pid 10461] <... futex resumed>) = ? [pid 10460] <... exit_group resumed>) = ? [pid 10462] +++ exited with 0 +++ [pid 10461] +++ exited with 0 +++ [pid 10460] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10460, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1152/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1152/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1152/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1152/bus") = 0 [pid 5052] umount2("./1152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1152/binderfs") = 0 [pid 5052] umount2("./1152/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1152/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1152/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1152/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1152/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1152") = 0 [ 266.992005][T10461] loop0: detected capacity change from 0 to 512 [ 267.001548][T10461] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1153", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10463 attached , child_tidptr=0x555556d60690) = 10463 [pid 10463] set_robust_list(0x555556d606a0, 24) = 0 [pid 10463] chdir("./1153") = 0 [pid 10463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10463] setpgid(0, 0) = 0 [pid 10463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10463] write(3, "1000", 4) = 4 [pid 10463] close(3) = 0 [pid 10463] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10463] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10463] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10463] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10463] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10463] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10464 attached [pid 10464] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10463] <... clone3 resumed> => {parent_tid=[10464]}, 88) = 10464 [pid 10464] set_robust_list(0x7f55300e29a0, 24 [pid 10463] rt_sigprocmask(SIG_SETMASK, [], [pid 10464] <... set_robust_list resumed>) = 0 [pid 10463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10464] rt_sigprocmask(SIG_SETMASK, [], [pid 10463] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10463] <... futex resumed>) = 0 [pid 10464] memfd_create("syzkaller", 0 [pid 10463] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10464] <... memfd_create resumed>) = 3 [pid 10463] <... mmap resumed>) = 0x7f55300a1000 [pid 10464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10463] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10463] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10465 attached [pid 10464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10463] <... clone3 resumed> => {parent_tid=[10465]}, 88) = 10465 [pid 10465] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10463] rt_sigprocmask(SIG_SETMASK, [], [pid 10465] <... rseq resumed>) = 0 [pid 10463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10465] set_robust_list(0x7f55300c19a0, 24 [pid 10463] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10465] <... set_robust_list resumed>) = 0 [pid 10463] <... futex resumed>) = 0 [pid 10465] rt_sigprocmask(SIG_SETMASK, [], [pid 10463] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10465] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10464] <... write resumed>) = 262144 [pid 10465] <... open resumed>) = 4 [pid 10464] munmap(0x7f5527ca1000, 262144 [pid 10465] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10463] <... futex resumed>) = 0 [pid 10464] <... munmap resumed>) = 0 [pid 10463] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10465] <... futex resumed>) = 1 [pid 10464] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10463] <... futex resumed>) = 0 [pid 10465] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10465] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10465] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10463] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10463] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10465] <... futex resumed>) = 0 [pid 10463] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10465] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10465] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10463] <... futex resumed>) = 0 [pid 10463] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10463] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10465] <... futex resumed>) = 1 [pid 10465] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10465] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10463] <... futex resumed>) = 0 [pid 10465] <... futex resumed>) = 1 [pid 10465] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10464] <... openat resumed>) = 5 [pid 10464] ioctl(5, LOOP_SET_FD, 3) = 0 [pid 10464] close(3) = 0 [pid 10464] mkdir("./file1", 0777) = 0 [pid 10464] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10464] ioctl(5, LOOP_CLR_FD) = 0 [pid 10464] close(5) = 0 [pid 10464] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10464] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10463] exit_group(0 [pid 10465] <... futex resumed>) = ? [pid 10463] <... exit_group resumed>) = ? [pid 10464] <... futex resumed>) = ? [pid 10464] +++ exited with 0 +++ [pid 10465] +++ exited with 0 +++ [pid 10463] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10463, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1153/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1153/bus") = 0 [pid 5052] umount2("./1153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1153/binderfs") = 0 [pid 5052] umount2("./1153/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1153/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1153/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1153/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1153/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1153") = 0 [ 267.090189][T10464] loop0: detected capacity change from 0 to 512 [ 267.099582][T10464] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1154", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10466 attached , child_tidptr=0x555556d60690) = 10466 [pid 10466] set_robust_list(0x555556d606a0, 24) = 0 [pid 10466] chdir("./1154") = 0 [pid 10466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10466] setpgid(0, 0) = 0 [pid 10466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10466] write(3, "1000", 4) = 4 [pid 10466] close(3) = 0 [pid 10466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10466] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10466] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10466] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10467 attached => {parent_tid=[10467]}, 88) = 10467 [pid 10466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10467] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10466] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10467] <... rseq resumed>) = 0 [pid 10466] <... futex resumed>) = 0 [pid 10467] set_robust_list(0x7f55300e29a0, 24 [pid 10466] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10467] <... set_robust_list resumed>) = 0 [pid 10466] <... futex resumed>) = 0 [pid 10467] rt_sigprocmask(SIG_SETMASK, [], [pid 10466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10466] <... mmap resumed>) = 0x7f55300a1000 [pid 10467] memfd_create("syzkaller", 0 [pid 10466] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10467] <... memfd_create resumed>) = 3 [pid 10466] <... mprotect resumed>) = 0 [pid 10467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10468 attached [pid 10468] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10466] <... clone3 resumed> => {parent_tid=[10468]}, 88) = 10468 [pid 10468] <... rseq resumed>) = 0 [pid 10467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10466] rt_sigprocmask(SIG_SETMASK, [], [pid 10468] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10468] rt_sigprocmask(SIG_SETMASK, [], [pid 10466] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10466] <... futex resumed>) = 0 [pid 10468] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10466] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10468] <... open resumed>) = 4 [pid 10468] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10466] <... futex resumed>) = 0 [pid 10466] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10466] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10468] <... futex resumed>) = 1 [pid 10468] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10468] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10466] <... futex resumed>) = 0 [pid 10466] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10468] <... futex resumed>) = 1 [pid 10466] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10468] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10468] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10467] <... write resumed>) = 262144 [pid 10468] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10467] munmap(0x7f5527ca1000, 262144 [pid 10466] <... futex resumed>) = 0 [pid 10466] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10467] <... munmap resumed>) = 0 [pid 10466] <... futex resumed>) = 1 [pid 10467] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10468] <... futex resumed>) = 0 [pid 10467] <... openat resumed>) = 6 [pid 10466] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10468] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10467] ioctl(6, LOOP_SET_FD, 3 [pid 10468] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10468] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10466] <... futex resumed>) = 0 [pid 10468] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10467] <... ioctl resumed>) = 0 [pid 10467] close(3) = 0 [pid 10467] mkdir("./file1", 0777) = 0 [pid 10467] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10467] ioctl(6, LOOP_CLR_FD) = 0 [pid 10467] close(6) = 0 [pid 10467] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10466] exit_group(0 [pid 10467] <... futex resumed>) = 0 [pid 10467] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10468] <... futex resumed>) = ? [pid 10468] +++ exited with 0 +++ [pid 10467] <... futex resumed>) = ? [pid 10466] <... exit_group resumed>) = ? [pid 10467] +++ exited with 0 +++ [pid 10466] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10466, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1154/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1154/bus") = 0 [pid 5052] umount2("./1154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1154/binderfs") = 0 [pid 5052] umount2("./1154/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1154/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1154/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1154/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1154/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1154") = 0 [ 267.203793][T10467] loop0: detected capacity change from 0 to 512 [ 267.217076][T10467] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1155", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10469 attached , child_tidptr=0x555556d60690) = 10469 [pid 10469] set_robust_list(0x555556d606a0, 24) = 0 [pid 10469] chdir("./1155") = 0 [pid 10469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10469] setpgid(0, 0) = 0 [pid 10469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10469] write(3, "1000", 4) = 4 [pid 10469] close(3) = 0 [pid 10469] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10469] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10469] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10469] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10469] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10469] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10470 attached => {parent_tid=[10470]}, 88) = 10470 [pid 10470] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10469] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10469] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10470] <... rseq resumed>) = 0 [pid 10469] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10470] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10470] memfd_create("syzkaller", 0) = 3 [pid 10470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10469] <... mprotect resumed>) = 0 [pid 10470] <... mmap resumed>) = 0x7f5527ca1000 [pid 10469] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10471 attached [pid 10469] <... clone3 resumed> => {parent_tid=[10471]}, 88) = 10471 [pid 10469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10469] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10469] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10471] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10471] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10470] <... write resumed>) = 262144 [pid 10471] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10470] munmap(0x7f5527ca1000, 262144) = 0 [pid 10470] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10470] ioctl(5, LOOP_SET_FD, 3 [pid 10471] <... open resumed>) = 4 [pid 10471] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10471] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10469] <... futex resumed>) = 0 [pid 10469] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10471] <... futex resumed>) = 0 [pid 10471] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10469] <... futex resumed>) = 1 [pid 10471] <... mount resumed>) = 0 [pid 10469] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10471] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10469] <... futex resumed>) = 0 [pid 10469] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10469] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10471] <... futex resumed>) = 1 [pid 10471] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10470] <... ioctl resumed>) = 0 [pid 10470] close(3) = 0 [pid 10470] mkdir("./file1", 0777 [pid 10471] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10469] <... futex resumed>) = 0 [pid 10471] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10470] <... mkdir resumed>) = 0 [pid 10469] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10469] <... futex resumed>) = 0 [pid 10471] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10469] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10470] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10470] ioctl(5, LOOP_CLR_FD) = 0 [pid 10470] close(5) = 0 [pid 10470] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10470] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10471] <... write resumed>) = 262144 [pid 10471] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10469] <... futex resumed>) = 0 [pid 10469] exit_group(0 [pid 10470] <... futex resumed>) = ? [pid 10469] <... exit_group resumed>) = ? [pid 10470] +++ exited with 0 +++ [pid 10471] +++ exited with 0 +++ [pid 10469] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10469, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1155/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1155/bus") = 0 [pid 5052] umount2("./1155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1155/binderfs") = 0 [pid 5052] umount2("./1155/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1155/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1155/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1155/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 267.315362][T10470] loop0: detected capacity change from 0 to 512 [ 267.326069][T10470] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1155/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1155") = 0 [pid 5052] mkdir("./1156", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10472 attached , child_tidptr=0x555556d60690) = 10472 [pid 10472] set_robust_list(0x555556d606a0, 24) = 0 [pid 10472] chdir("./1156") = 0 [pid 10472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10472] setpgid(0, 0) = 0 [pid 10472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10472] write(3, "1000", 4) = 4 [pid 10472] close(3) = 0 [pid 10472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10472] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10472] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10472] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10473 attached [pid 10473] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10472] <... clone3 resumed> => {parent_tid=[10473]}, 88) = 10473 [pid 10473] <... rseq resumed>) = 0 [pid 10472] rt_sigprocmask(SIG_SETMASK, [], [pid 10473] set_robust_list(0x7f55300e29a0, 24 [pid 10472] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10473] <... set_robust_list resumed>) = 0 [pid 10472] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10472] <... futex resumed>) = 0 [pid 10472] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10473] memfd_create("syzkaller", 0 [pid 10472] <... mmap resumed>) = 0x7f55300a1000 [pid 10473] <... memfd_create resumed>) = 3 [pid 10472] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10472] <... mprotect resumed>) = 0 [pid 10473] <... mmap resumed>) = 0x7f5527ca1000 [pid 10472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10474 attached => {parent_tid=[10474]}, 88) = 10474 [pid 10473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10474] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10472] rt_sigprocmask(SIG_SETMASK, [], [pid 10474] <... rseq resumed>) = 0 [pid 10472] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10474] set_robust_list(0x7f55300c19a0, 24 [pid 10472] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10474] <... set_robust_list resumed>) = 0 [pid 10474] rt_sigprocmask(SIG_SETMASK, [], [pid 10472] <... futex resumed>) = 0 [pid 10474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10472] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10474] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10474] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10473] <... write resumed>) = 262144 [pid 10472] <... futex resumed>) = 0 [pid 10472] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10474] <... futex resumed>) = 1 [pid 10472] <... futex resumed>) = 0 [pid 10474] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10472] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10474] <... mount resumed>) = 0 [pid 10473] munmap(0x7f5527ca1000, 262144 [pid 10474] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10472] <... futex resumed>) = 0 [pid 10474] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10472] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10472] <... futex resumed>) = 0 [pid 10474] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10473] <... munmap resumed>) = 0 [pid 10474] <... open resumed>) = 5 [pid 10472] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10474] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10472] <... futex resumed>) = 0 [pid 10474] <... futex resumed>) = 1 [pid 10472] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10474] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10472] <... futex resumed>) = 0 [pid 10474] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10472] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10474] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10474] <... futex resumed>) = 0 [pid 10474] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10473] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10473] close(3) = 0 [pid 10473] mkdir("./file1", 0777) = 0 [pid 10473] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10473] ioctl(6, LOOP_CLR_FD) = 0 [pid 10473] close(6) = 0 [pid 10473] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10473] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10472] exit_group(0 [pid 10474] <... futex resumed>) = ? [pid 10473] <... futex resumed>) = ? [pid 10472] <... exit_group resumed>) = ? [pid 10473] +++ exited with 0 +++ [pid 10474] +++ exited with 0 +++ [pid 10472] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10472, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1156/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1156/bus") = 0 [pid 5052] umount2("./1156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1156/binderfs") = 0 [pid 5052] umount2("./1156/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1156/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1156/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1156/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1156/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1156") = 0 [ 267.431839][T10473] loop0: detected capacity change from 0 to 512 [ 267.441815][T10473] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1157", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10475 attached , child_tidptr=0x555556d60690) = 10475 [pid 10475] set_robust_list(0x555556d606a0, 24) = 0 [pid 10475] chdir("./1157") = 0 [pid 10475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10475] setpgid(0, 0) = 0 [pid 10475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10475] write(3, "1000", 4) = 4 [pid 10475] close(3) = 0 [pid 10475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10475] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10475] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10475] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10476]}, 88) = 10476 ./strace-static-x86_64: Process 10476 attached [pid 10476] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10475] rt_sigprocmask(SIG_SETMASK, [], [pid 10476] <... rseq resumed>) = 0 [pid 10475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10476] set_robust_list(0x7f55300e29a0, 24 [pid 10475] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10476] <... set_robust_list resumed>) = 0 [pid 10476] rt_sigprocmask(SIG_SETMASK, [], [pid 10475] <... futex resumed>) = 0 [pid 10476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10476] memfd_create("syzkaller", 0 [pid 10475] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10476] <... memfd_create resumed>) = 3 [pid 10475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10475] <... mmap resumed>) = 0x7f55300a1000 [pid 10476] <... mmap resumed>) = 0x7f5527ca1000 [pid 10475] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10475] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10475] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10477]}, 88) = 10477 [pid 10475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10475] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10475] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10477 attached [pid 10477] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10477] set_robust_list(0x7f55300c19a0, 24 [pid 10476] <... write resumed>) = 262144 [pid 10477] <... set_robust_list resumed>) = 0 [pid 10477] rt_sigprocmask(SIG_SETMASK, [], [pid 10476] munmap(0x7f5527ca1000, 262144 [pid 10477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10477] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10476] <... munmap resumed>) = 0 [pid 10477] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10476] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10477] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10475] <... futex resumed>) = 0 [pid 10475] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10477] <... futex resumed>) = 0 [pid 10476] <... openat resumed>) = 5 [pid 10475] <... futex resumed>) = 1 [pid 10477] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10475] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10477] <... mount resumed>) = 0 [pid 10476] ioctl(5, LOOP_SET_FD, 3 [pid 10477] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10475] <... futex resumed>) = 0 [pid 10475] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10477] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10475] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10477] <... open resumed>) = 6 [pid 10477] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10475] <... futex resumed>) = 0 [pid 10475] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10477] <... futex resumed>) = 1 [pid 10477] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10475] <... futex resumed>) = 0 [pid 10476] <... ioctl resumed>) = 0 [pid 10475] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10476] close(3) = 0 [pid 10476] mkdir("./file1", 0777) = 0 [pid 10476] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10476] ioctl(5, LOOP_CLR_FD) = 0 [pid 10476] close(5) = 0 [pid 10476] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10477] <... write resumed>) = 262144 [pid 10476] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10477] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10475] <... futex resumed>) = 0 [pid 10477] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10475] exit_group(0 [pid 10477] <... futex resumed>) = ? [pid 10476] <... futex resumed>) = ? [pid 10475] <... exit_group resumed>) = ? [pid 10477] +++ exited with 0 +++ [pid 10476] +++ exited with 0 +++ [pid 10475] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10475, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1157/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1157/bus") = 0 [pid 5052] umount2("./1157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1157/binderfs") = 0 [pid 5052] umount2("./1157/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1157/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 267.544564][T10476] loop0: detected capacity change from 0 to 512 [ 267.561045][T10476] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1157/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1157/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1157/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1157") = 0 [pid 5052] mkdir("./1158", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10478 attached , child_tidptr=0x555556d60690) = 10478 [pid 10478] set_robust_list(0x555556d606a0, 24) = 0 [pid 10478] chdir("./1158") = 0 [pid 10478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10478] setpgid(0, 0) = 0 [pid 10478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10478] write(3, "1000", 4) = 4 [pid 10478] close(3) = 0 [pid 10478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10478] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10478] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10478] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10478] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10478] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10478] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10479 attached [pid 10479] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10478] <... clone3 resumed> => {parent_tid=[10479]}, 88) = 10479 [pid 10479] set_robust_list(0x7f55300e29a0, 24 [pid 10478] rt_sigprocmask(SIG_SETMASK, [], [pid 10479] <... set_robust_list resumed>) = 0 [pid 10478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10479] rt_sigprocmask(SIG_SETMASK, [], [pid 10478] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10479] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10478] <... futex resumed>) = 0 [pid 10479] memfd_create("syzkaller", 0 [pid 10478] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10479] <... memfd_create resumed>) = 3 [pid 10478] <... mmap resumed>) = 0x7f55300a1000 [pid 10479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10478] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10478] <... mprotect resumed>) = 0 [pid 10478] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10478] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10480]}, 88) = 10480 ./strace-static-x86_64: Process 10480 attached [pid 10478] rt_sigprocmask(SIG_SETMASK, [], [pid 10480] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10480] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10480] rt_sigprocmask(SIG_SETMASK, [], [pid 10478] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10478] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10480] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10479] <... write resumed>) = 262144 [pid 10479] munmap(0x7f5527ca1000, 262144) = 0 [pid 10479] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10479] ioctl(5, LOOP_SET_FD, 3 [pid 10480] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10480] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10478] <... futex resumed>) = 0 [pid 10478] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10478] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10480] <... futex resumed>) = 0 [pid 10480] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10479] <... ioctl resumed>) = 0 [pid 10479] close(3 [pid 10480] <... mount resumed>) = 0 [pid 10479] <... close resumed>) = 0 [pid 10480] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10479] mkdir("./file1", 0777 [pid 10480] <... futex resumed>) = 1 [pid 10478] <... futex resumed>) = 0 [pid 10480] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10478] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10480] <... futex resumed>) = 0 [pid 10478] <... futex resumed>) = 1 [pid 10478] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10480] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10479] <... mkdir resumed>) = 0 [pid 10479] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10480] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10478] <... futex resumed>) = 0 [pid 10480] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10478] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10478] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10479] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10479] ioctl(5, LOOP_CLR_FD) = 0 [pid 10479] close(5) = 0 [pid 10479] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10479] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 10480] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10478] <... futex resumed>) = 0 [pid 10478] exit_group(0) = ? [pid 10479] <... futex resumed>) = ? [pid 10479] +++ exited with 0 +++ [pid 10480] <... futex resumed>) = ? [pid 10480] +++ exited with 0 +++ [pid 10478] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10478, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1158/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1158/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1158/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1158/bus") = 0 [pid 5052] umount2("./1158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1158/binderfs") = 0 [pid 5052] umount2("./1158/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1158/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1158/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1158/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1158/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1158") = 0 [ 267.642265][T10479] loop0: detected capacity change from 0 to 512 [ 267.656191][T10479] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1159", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10481 attached , child_tidptr=0x555556d60690) = 10481 [pid 10481] set_robust_list(0x555556d606a0, 24) = 0 [pid 10481] chdir("./1159") = 0 [pid 10481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10481] setpgid(0, 0) = 0 [pid 10481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10481] write(3, "1000", 4) = 4 [pid 10481] close(3) = 0 [pid 10481] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10481] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10481] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10481] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10481] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10481] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10482 attached [pid 10482] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10481] <... clone3 resumed> => {parent_tid=[10482]}, 88) = 10482 [pid 10482] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10481] rt_sigprocmask(SIG_SETMASK, [], [pid 10482] rt_sigprocmask(SIG_SETMASK, [], [pid 10481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10481] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10482] memfd_create("syzkaller", 0 [pid 10481] <... futex resumed>) = 0 [pid 10481] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10482] <... memfd_create resumed>) = 3 [pid 10481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10481] <... mmap resumed>) = 0x7f55300a1000 [pid 10482] <... mmap resumed>) = 0x7f5527ca1000 [pid 10481] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10481] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10483]}, 88) = 10483 [pid 10481] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10481] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10483 attached [pid 10483] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10483] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10481] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10483] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10482] <... write resumed>) = 262144 [pid 10482] munmap(0x7f5527ca1000, 262144) = 0 [pid 10483] <... open resumed>) = 4 [pid 10482] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10482] ioctl(5, LOOP_SET_FD, 3 [pid 10483] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10483] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10481] <... futex resumed>) = 0 [pid 10481] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10483] <... futex resumed>) = 0 [pid 10481] <... futex resumed>) = 1 [pid 10483] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10481] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10483] <... mount resumed>) = 0 [pid 10483] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10482] <... ioctl resumed>) = 0 [pid 10483] <... futex resumed>) = 1 [pid 10482] close(3 [pid 10481] <... futex resumed>) = 0 [pid 10483] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10482] <... close resumed>) = 0 [pid 10481] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10482] mkdir("./file1", 0777 [pid 10481] <... futex resumed>) = 0 [pid 10483] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10482] <... mkdir resumed>) = 0 [pid 10481] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10483] <... open resumed>) = 3 [pid 10483] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10483] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10482] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10481] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10483] <... futex resumed>) = 0 [pid 10481] <... futex resumed>) = 1 [pid 10483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10481] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10482] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10482] ioctl(5, LOOP_CLR_FD) = 0 [pid 10482] close(5) = 0 [pid 10482] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10482] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10483] <... write resumed>) = 262144 [pid 10483] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10481] <... futex resumed>) = 0 [pid 10483] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10481] exit_group(0 [pid 10483] <... futex resumed>) = ? [pid 10483] +++ exited with 0 +++ [pid 10482] <... futex resumed>) = ? [pid 10482] +++ exited with 0 +++ [pid 10481] <... exit_group resumed>) = ? [pid 10481] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10481, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1159/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 267.734245][T10482] loop0: detected capacity change from 0 to 512 [ 267.746956][T10482] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1159/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1159/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1159/bus") = 0 [pid 5052] umount2("./1159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1159/binderfs") = 0 [pid 5052] umount2("./1159/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1159/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1159/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1159/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1159/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1159") = 0 [pid 5052] mkdir("./1160", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10484 attached , child_tidptr=0x555556d60690) = 10484 [pid 10484] set_robust_list(0x555556d606a0, 24) = 0 [pid 10484] chdir("./1160") = 0 [pid 10484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10484] setpgid(0, 0) = 0 [pid 10484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10484] write(3, "1000", 4) = 4 [pid 10484] close(3) = 0 [pid 10484] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10484] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10484] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10484] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10484] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10484] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10484] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10485 attached => {parent_tid=[10485]}, 88) = 10485 [pid 10485] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10484] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10484] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10485] <... rseq resumed>) = 0 [pid 10484] <... mmap resumed>) = 0x7f55300a1000 [pid 10485] set_robust_list(0x7f55300e29a0, 24 [pid 10484] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10485] <... set_robust_list resumed>) = 0 [pid 10485] rt_sigprocmask(SIG_SETMASK, [], [pid 10484] <... mprotect resumed>) = 0 [pid 10485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10484] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10484] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10485] memfd_create("syzkaller", 0./strace-static-x86_64: Process 10486 attached [pid 10486] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10484] <... clone3 resumed> => {parent_tid=[10486]}, 88) = 10486 [pid 10486] <... rseq resumed>) = 0 [pid 10485] <... memfd_create resumed>) = 3 [pid 10484] rt_sigprocmask(SIG_SETMASK, [], [pid 10486] set_robust_list(0x7f55300c19a0, 24 [pid 10485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10486] <... set_robust_list resumed>) = 0 [pid 10484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10486] rt_sigprocmask(SIG_SETMASK, [], [pid 10484] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10485] <... mmap resumed>) = 0x7f5527ca1000 [pid 10484] <... futex resumed>) = 0 [pid 10486] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10484] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10486] <... open resumed>) = 4 [pid 10486] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10484] <... futex resumed>) = 0 [pid 10484] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10484] <... futex resumed>) = 0 [pid 10484] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10486] <... futex resumed>) = 1 [pid 10486] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10486] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10484] <... futex resumed>) = 0 [pid 10486] <... futex resumed>) = 1 [pid 10484] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10486] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10484] <... futex resumed>) = 0 [pid 10486] <... open resumed>) = 5 [pid 10484] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10486] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10484] <... futex resumed>) = 0 [pid 10484] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10484] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10486] <... futex resumed>) = 1 [pid 10486] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10486] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10484] <... futex resumed>) = 0 [pid 10486] <... futex resumed>) = 1 [pid 10486] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10485] <... write resumed>) = 262144 [pid 10485] munmap(0x7f5527ca1000, 262144) = 0 [pid 10485] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10485] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10485] close(3) = 0 [pid 10485] mkdir("./file1", 0777) = 0 [pid 10485] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10485] ioctl(6, LOOP_CLR_FD) = 0 [pid 10485] close(6) = 0 [pid 10485] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10484] exit_group(0 [pid 10485] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10486] <... futex resumed>) = ? [pid 10485] <... futex resumed>) = ? [pid 10484] <... exit_group resumed>) = ? [pid 10486] +++ exited with 0 +++ [pid 10485] +++ exited with 0 +++ [pid 10484] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10484, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1160/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1160/bus") = 0 [pid 5052] umount2("./1160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1160/binderfs") = 0 [pid 5052] umount2("./1160/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1160/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1160/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1160/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1160/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 267.857696][T10485] loop0: detected capacity change from 0 to 512 [ 267.866410][T10485] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1160") = 0 [pid 5052] mkdir("./1161", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10487 ./strace-static-x86_64: Process 10487 attached [pid 10487] set_robust_list(0x555556d606a0, 24) = 0 [pid 10487] chdir("./1161") = 0 [pid 10487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10487] setpgid(0, 0) = 0 [pid 10487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10487] write(3, "1000", 4) = 4 [pid 10487] close(3) = 0 [pid 10487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10487] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10487] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10487] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10487] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10487] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10487] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10488 attached => {parent_tid=[10488]}, 88) = 10488 [pid 10487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10487] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10487] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10488] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10487] <... mmap resumed>) = 0x7f55300a1000 [pid 10488] <... rseq resumed>) = 0 [pid 10487] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10488] set_robust_list(0x7f55300e29a0, 24 [pid 10487] <... mprotect resumed>) = 0 [pid 10488] <... set_robust_list resumed>) = 0 [pid 10488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10487] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10487] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10489 attached [pid 10488] memfd_create("syzkaller", 0 [pid 10487] <... clone3 resumed> => {parent_tid=[10489]}, 88) = 10489 [pid 10487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10487] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10487] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10489] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10488] <... memfd_create resumed>) = 3 [pid 10489] <... rseq resumed>) = 0 [pid 10489] set_robust_list(0x7f55300c19a0, 24 [pid 10488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10489] <... set_robust_list resumed>) = 0 [pid 10488] <... mmap resumed>) = 0x7f5527ca1000 [pid 10489] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10489] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10489] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10489] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10487] <... futex resumed>) = 0 [pid 10487] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10489] <... futex resumed>) = 0 [pid 10487] <... futex resumed>) = 1 [pid 10489] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10487] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10489] <... mount resumed>) = 0 [pid 10488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10489] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10487] <... futex resumed>) = 0 [pid 10487] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10489] <... futex resumed>) = 1 [pid 10487] <... futex resumed>) = 0 [pid 10489] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10487] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10489] <... open resumed>) = 5 [pid 10489] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10487] <... futex resumed>) = 0 [pid 10489] <... futex resumed>) = 1 [pid 10487] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10489] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10487] <... futex resumed>) = 0 [pid 10489] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10487] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10489] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10489] <... futex resumed>) = 0 [pid 10489] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10488] <... write resumed>) = 262144 [pid 10488] munmap(0x7f5527ca1000, 262144) = 0 [pid 10488] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10488] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10488] close(3) = 0 [pid 10488] mkdir("./file1", 0777) = 0 [pid 10488] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10488] ioctl(6, LOOP_CLR_FD) = 0 [pid 10488] close(6) = 0 [pid 10488] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10488] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10487] exit_group(0 [pid 10489] <... futex resumed>) = ? [pid 10488] <... futex resumed>) = ? [pid 10487] <... exit_group resumed>) = ? [pid 10488] +++ exited with 0 +++ [pid 10489] +++ exited with 0 +++ [pid 10487] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10487, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1161/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1161/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1161/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1161/bus") = 0 [pid 5052] umount2("./1161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1161/binderfs") = 0 [pid 5052] umount2("./1161/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1161/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1161/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1161/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1161/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1161") = 0 [pid 5052] mkdir("./1162", 0777) = 0 [ 267.980484][T10488] loop0: detected capacity change from 0 to 512 [ 267.989853][T10488] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10490 attached , child_tidptr=0x555556d60690) = 10490 [pid 10490] set_robust_list(0x555556d606a0, 24) = 0 [pid 10490] chdir("./1162") = 0 [pid 10490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10490] setpgid(0, 0) = 0 [pid 10490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10490] write(3, "1000", 4) = 4 [pid 10490] close(3) = 0 [pid 10490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10490] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10490] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10490] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10490] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10490] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10491 attached => {parent_tid=[10491]}, 88) = 10491 [pid 10491] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10490] rt_sigprocmask(SIG_SETMASK, [], [pid 10491] set_robust_list(0x7f55300e29a0, 24 [pid 10490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10491] <... set_robust_list resumed>) = 0 [pid 10490] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10491] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10490] <... futex resumed>) = 0 [pid 10491] memfd_create("syzkaller", 0 [pid 10490] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10491] <... memfd_create resumed>) = 3 [pid 10490] <... mmap resumed>) = 0x7f55300a1000 [pid 10491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10490] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10490] <... mprotect resumed>) = 0 [pid 10490] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10492]}, 88) = 10492 [pid 10490] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10490] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10490] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10492 attached [pid 10492] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10491] <... write resumed>) = 262144 [pid 10492] <... rseq resumed>) = 0 [pid 10492] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10492] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10491] munmap(0x7f5527ca1000, 262144 [pid 10492] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10490] <... futex resumed>) = 0 [pid 10492] <... futex resumed>) = 1 [pid 10490] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10492] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10490] <... futex resumed>) = 0 [pid 10492] <... mount resumed>) = 0 [pid 10490] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10492] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10491] <... munmap resumed>) = 0 [pid 10492] <... futex resumed>) = 1 [pid 10490] <... futex resumed>) = 0 [pid 10490] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10490] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10492] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10492] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10490] <... futex resumed>) = 0 [pid 10490] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10490] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10492] <... futex resumed>) = 1 [pid 10492] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10492] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10490] <... futex resumed>) = 0 [pid 10492] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10491] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10491] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10491] close(3) = 0 [pid 10491] mkdir("./file1", 0777) = 0 [pid 10491] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10491] ioctl(6, LOOP_CLR_FD) = 0 [pid 10491] close(6) = 0 [pid 10491] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10490] exit_group(0 [pid 10491] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10490] <... exit_group resumed>) = ? [pid 10491] <... futex resumed>) = ? [pid 10491] +++ exited with 0 +++ [pid 10492] <... futex resumed>) = ? [pid 10492] +++ exited with 0 +++ [pid 10490] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10490, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1162/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1162/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1162/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1162/bus") = 0 [pid 5052] umount2("./1162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1162/binderfs") = 0 [pid 5052] umount2("./1162/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1162/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1162/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1162/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 268.080299][T10491] loop0: detected capacity change from 0 to 512 [ 268.089243][T10491] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1162/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1162") = 0 [pid 5052] mkdir("./1163", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10493 ./strace-static-x86_64: Process 10493 attached [pid 10493] set_robust_list(0x555556d606a0, 24) = 0 [pid 10493] chdir("./1163") = 0 [pid 10493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10493] setpgid(0, 0) = 0 [pid 10493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10493] write(3, "1000", 4) = 4 [pid 10493] close(3) = 0 [pid 10493] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10493] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10493] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10493] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10493] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10493] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10494 attached [pid 10494] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10493] <... clone3 resumed> => {parent_tid=[10494]}, 88) = 10494 [pid 10494] set_robust_list(0x7f55300e29a0, 24 [pid 10493] rt_sigprocmask(SIG_SETMASK, [], [pid 10494] <... set_robust_list resumed>) = 0 [pid 10493] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10494] rt_sigprocmask(SIG_SETMASK, [], [pid 10493] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10493] <... futex resumed>) = 0 [pid 10494] memfd_create("syzkaller", 0 [pid 10493] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10494] <... memfd_create resumed>) = 3 [pid 10493] <... mmap resumed>) = 0x7f55300a1000 [pid 10494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10493] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10493] <... mprotect resumed>) = 0 [pid 10493] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10495 attached [pid 10495] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10495] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10495] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10495] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10493] <... clone3 resumed> => {parent_tid=[10495]}, 88) = 10495 [pid 10493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10493] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10495] <... futex resumed>) = 0 [pid 10493] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10495] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10494] <... write resumed>) = 262144 [pid 10495] <... open resumed>) = 4 [pid 10495] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10493] <... futex resumed>) = 0 [pid 10493] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10493] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10495] <... futex resumed>) = 1 [pid 10495] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10494] munmap(0x7f5527ca1000, 262144 [pid 10495] <... mount resumed>) = 0 [pid 10495] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10494] <... munmap resumed>) = 0 [pid 10493] <... futex resumed>) = 0 [pid 10495] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10493] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10494] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10493] <... futex resumed>) = 0 [pid 10495] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10493] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10495] <... open resumed>) = 5 [pid 10495] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10493] <... futex resumed>) = 0 [pid 10493] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10493] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10495] <... futex resumed>) = 1 [pid 10495] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10495] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10493] <... futex resumed>) = 0 [pid 10495] <... futex resumed>) = 1 [pid 10495] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10494] <... openat resumed>) = 6 [pid 10494] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10494] close(3) = 0 [pid 10494] mkdir("./file1", 0777) = 0 [pid 10494] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10494] ioctl(6, LOOP_CLR_FD) = 0 [pid 10494] close(6) = 0 [pid 10494] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10494] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10493] exit_group(0 [pid 10494] <... futex resumed>) = ? [pid 10493] <... exit_group resumed>) = ? [pid 10495] <... futex resumed>) = ? [pid 10494] +++ exited with 0 +++ [pid 10495] +++ exited with 0 +++ [pid 10493] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10493, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1163/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1163/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1163/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1163/bus") = 0 [pid 5052] umount2("./1163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1163/binderfs") = 0 [pid 5052] umount2("./1163/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1163/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1163/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1163/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1163/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1163") = 0 [pid 5052] mkdir("./1164", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10496 attached , child_tidptr=0x555556d60690) = 10496 [pid 10496] set_robust_list(0x555556d606a0, 24) = 0 [pid 10496] chdir("./1164") = 0 [pid 10496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10496] setpgid(0, 0) = 0 [pid 10496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10496] write(3, "1000", 4) = 4 [pid 10496] close(3) = 0 [pid 10496] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10496] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10496] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10496] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10496] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10497]}, 88) = 10497 [pid 10496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10496] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10496] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10496] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10498 attached [pid 10498] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10498] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10496] <... clone3 resumed> => {parent_tid=[10498]}, 88) = 10498 [pid 10498] rt_sigprocmask(SIG_SETMASK, [], [pid 10496] rt_sigprocmask(SIG_SETMASK, [], [pid 10498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10498] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10496] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10498] <... futex resumed>) = 0 [pid 10496] <... futex resumed>) = 1 [pid 10498] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 268.195620][T10494] loop0: detected capacity change from 0 to 512 [ 268.204449][T10494] ext4: Unknown parameter 'nouser_xattr' [pid 10496] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10497 attached [pid 10497] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10498] <... open resumed>) = 3 [pid 10497] <... rseq resumed>) = 0 [pid 10497] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10497] memfd_create("syzkaller", 0 [pid 10498] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10497] <... memfd_create resumed>) = 4 [pid 10497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10496] <... futex resumed>) = 0 [pid 10498] <... futex resumed>) = 1 [pid 10496] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10498] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10497] <... mmap resumed>) = 0x7f5527ca1000 [pid 10496] <... futex resumed>) = 0 [pid 10496] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10498] <... mount resumed>) = 0 [pid 10498] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10496] <... futex resumed>) = 0 [pid 10498] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10496] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10498] <... futex resumed>) = 0 [pid 10496] <... futex resumed>) = 1 [pid 10498] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10496] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10498] <... open resumed>) = 5 [pid 10497] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10498] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10496] <... futex resumed>) = 0 [pid 10498] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10496] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10496] <... futex resumed>) = 0 [pid 10498] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10496] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10498] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10498] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10496] <... futex resumed>) = 0 [pid 10498] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10497] <... write resumed>) = 262144 [pid 10497] munmap(0x7f5527ca1000, 262144) = 0 [pid 10497] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10497] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10497] close(4) = 0 [pid 10497] mkdir("./file1", 0777) = 0 [pid 10497] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10497] ioctl(6, LOOP_CLR_FD) = 0 [pid 10497] close(6) = 0 [pid 10497] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10497] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10496] exit_group(0 [pid 10498] <... futex resumed>) = ? [pid 10496] <... exit_group resumed>) = ? [pid 10497] <... futex resumed>) = ? [pid 10497] +++ exited with 0 +++ [pid 10498] +++ exited with 0 +++ [pid 10496] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10496, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1164/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1164/bus") = 0 [pid 5052] umount2("./1164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1164/binderfs") = 0 [pid 5052] umount2("./1164/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1164/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1164/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1164/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1164/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1164") = 0 [pid 5052] mkdir("./1165", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10499 attached , child_tidptr=0x555556d60690) = 10499 [pid 10499] set_robust_list(0x555556d606a0, 24) = 0 [pid 10499] chdir("./1165") = 0 [pid 10499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 268.281474][T10497] loop0: detected capacity change from 0 to 512 [ 268.291231][T10497] ext4: Unknown parameter 'nouser_xattr' [pid 10499] setpgid(0, 0) = 0 [pid 10499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10499] write(3, "1000", 4) = 4 [pid 10499] close(3) = 0 [pid 10499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10499] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10499] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10499] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10499] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10499] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10499] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10500]}, 88) = 10500 [pid 10499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10499] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10500 attached [pid 10499] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10500] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10499] <... futex resumed>) = 0 [pid 10500] <... rseq resumed>) = 0 [pid 10500] set_robust_list(0x7f55300e29a0, 24 [pid 10499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10500] <... set_robust_list resumed>) = 0 [pid 10499] <... mmap resumed>) = 0x7f55300a1000 [pid 10500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10500] memfd_create("syzkaller", 0 [pid 10499] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10500] <... memfd_create resumed>) = 3 [pid 10500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10499] <... mprotect resumed>) = 0 [pid 10500] <... mmap resumed>) = 0x7f5527ca1000 [pid 10499] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10499] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10501 attached [pid 10499] <... clone3 resumed> => {parent_tid=[10501]}, 88) = 10501 [pid 10501] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10499] rt_sigprocmask(SIG_SETMASK, [], [pid 10501] <... rseq resumed>) = 0 [pid 10499] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10501] set_robust_list(0x7f55300c19a0, 24 [pid 10499] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10501] <... set_robust_list resumed>) = 0 [pid 10499] <... futex resumed>) = 0 [pid 10499] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10501] rt_sigprocmask(SIG_SETMASK, [], [pid 10500] <... write resumed>) = 262144 [pid 10501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10501] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10501] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10499] <... futex resumed>) = 0 [pid 10500] munmap(0x7f5527ca1000, 262144 [pid 10499] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10500] <... munmap resumed>) = 0 [pid 10501] <... futex resumed>) = 1 [pid 10499] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10501] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10501] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10501] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10499] <... futex resumed>) = 0 [pid 10499] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10501] <... futex resumed>) = 0 [pid 10499] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10501] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10500] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10501] <... open resumed>) = 5 [pid 10500] <... openat resumed>) = 6 [pid 10500] ioctl(6, LOOP_SET_FD, 3 [pid 10501] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10499] <... futex resumed>) = 0 [pid 10501] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10499] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10501] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10499] <... futex resumed>) = 0 [pid 10499] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10500] <... ioctl resumed>) = 0 [pid 10500] close(3) = 0 [pid 10500] mkdir("./file1", 0777) = 0 [ 268.383549][T10500] loop0: detected capacity change from 0 to 512 [ 268.392113][T10501] I/O error, dev loop0, sector 248 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 268.394234][ T5077] I/O error, dev loop0, sector 504 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 268.403238][T10501] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 268.412837][ T5077] Buffer I/O error on dev loop0, logical block 63, lost async page write [pid 10500] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10501] <... write resumed>) = -1 EIO (Input/output error) [pid 10500] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10501] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10500] ioctl(6, LOOP_CLR_FD [pid 10501] <... futex resumed>) = 1 [pid 10500] <... ioctl resumed>) = 0 [pid 10499] <... futex resumed>) = 0 [pid 10501] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10500] close(6) = 0 [pid 10500] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10500] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10499] exit_group(0 [pid 10501] <... futex resumed>) = ? [pid 10500] <... futex resumed>) = ? [pid 10499] <... exit_group resumed>) = ? [pid 10501] +++ exited with 0 +++ [pid 10500] +++ exited with 0 +++ [pid 10499] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10499, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] umount2("./1165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1165/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1165/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1165/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1165/bus") = 0 [pid 5052] umount2("./1165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1165/binderfs") = 0 [pid 5052] umount2("./1165/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1165/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1165/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1165/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1165/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1165") = 0 [ 268.427367][T10500] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1166", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10502 attached , child_tidptr=0x555556d60690) = 10502 [pid 10502] set_robust_list(0x555556d606a0, 24) = 0 [pid 10502] chdir("./1166") = 0 [pid 10502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10502] setpgid(0, 0) = 0 [pid 10502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10502] write(3, "1000", 4) = 4 [pid 10502] close(3) = 0 [pid 10502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10502] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10502] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10502] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10502] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10502] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10503 attached [pid 10503] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10502] <... clone3 resumed> => {parent_tid=[10503]}, 88) = 10503 [pid 10503] <... rseq resumed>) = 0 [pid 10503] set_robust_list(0x7f55300e29a0, 24 [pid 10502] rt_sigprocmask(SIG_SETMASK, [], [pid 10503] <... set_robust_list resumed>) = 0 [pid 10502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10502] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10502] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10503] rt_sigprocmask(SIG_SETMASK, [], [pid 10502] <... mmap resumed>) = 0x7f55300a1000 [pid 10503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10503] memfd_create("syzkaller", 0 [pid 10502] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10503] <... memfd_create resumed>) = 3 [pid 10502] <... mprotect resumed>) = 0 [pid 10503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10502] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10504 attached => {parent_tid=[10504]}, 88) = 10504 [pid 10504] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10504] <... rseq resumed>) = 0 [pid 10502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10504] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10504] rt_sigprocmask(SIG_SETMASK, [], [pid 10502] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10502] <... futex resumed>) = 0 [pid 10502] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10504] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10504] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10504] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10503] <... write resumed>) = 262144 [pid 10502] <... futex resumed>) = 0 [pid 10502] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10504] <... futex resumed>) = 0 [pid 10502] <... futex resumed>) = 1 [pid 10502] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10503] munmap(0x7f5527ca1000, 262144 [pid 10504] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10503] <... munmap resumed>) = 0 [pid 10504] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10504] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10503] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10503] ioctl(5, LOOP_SET_FD, 3 [pid 10502] <... futex resumed>) = 0 [pid 10502] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10504] <... futex resumed>) = 0 [pid 10502] <... futex resumed>) = 1 [pid 10504] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10502] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10504] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10502] <... futex resumed>) = 0 [pid 10502] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10504] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10502] <... futex resumed>) = 0 [pid 10502] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10503] <... ioctl resumed>) = 0 [pid 10503] close(3) = 0 [pid 10503] mkdir("./file1", 0777) = 0 [pid 10503] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10503] ioctl(5, LOOP_CLR_FD) = 0 [pid 10503] close(5) = 0 [pid 10503] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10503] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10504] <... write resumed>) = 262144 [pid 10504] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10502] <... futex resumed>) = 0 [pid 10504] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10502] exit_group(0 [pid 10504] <... futex resumed>) = ? [pid 10503] <... futex resumed>) = ? [pid 10502] <... exit_group resumed>) = ? [pid 10504] +++ exited with 0 +++ [pid 10503] +++ exited with 0 +++ [pid 10502] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10502, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1166/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1166/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1166/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 268.512983][T10503] loop0: detected capacity change from 0 to 512 [ 268.522249][T10503] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1166/bus") = 0 [pid 5052] umount2("./1166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1166/binderfs") = 0 [pid 5052] umount2("./1166/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1166/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1166/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1166/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1166/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1166") = 0 [pid 5052] mkdir("./1167", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10505 attached , child_tidptr=0x555556d60690) = 10505 [pid 10505] set_robust_list(0x555556d606a0, 24) = 0 [pid 10505] chdir("./1167") = 0 [pid 10505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10505] setpgid(0, 0) = 0 [pid 10505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10505] write(3, "1000", 4) = 4 [pid 10505] close(3) = 0 [pid 10505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10505] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10505] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10505] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10505] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10506]}, 88) = 10506 [pid 10505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10505] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10505] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10505] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10507 attached [pid 10507] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10507] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10505] <... clone3 resumed> => {parent_tid=[10507]}, 88) = 10507 [pid 10507] rt_sigprocmask(SIG_SETMASK, [], [pid 10505] rt_sigprocmask(SIG_SETMASK, [], [pid 10507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10507] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10505] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 10506 attached [pid 10505] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10506] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10507] <... futex resumed>) = 0 [pid 10506] <... rseq resumed>) = 0 [pid 10505] <... futex resumed>) = 1 [pid 10507] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10506] set_robust_list(0x7f55300e29a0, 24 [pid 10505] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10507] <... open resumed>) = 3 [pid 10506] <... set_robust_list resumed>) = 0 [pid 10507] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10505] <... futex resumed>) = 0 [pid 10505] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10505] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10507] <... futex resumed>) = 1 [pid 10507] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10507] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10505] <... futex resumed>) = 0 [pid 10505] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10507] <... futex resumed>) = 1 [pid 10505] <... futex resumed>) = 0 [pid 10507] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10505] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10507] <... open resumed>) = 4 [pid 10507] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10505] <... futex resumed>) = 0 [pid 10505] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10505] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10507] <... futex resumed>) = 1 [pid 10507] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10507] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10506] memfd_create("syzkaller", 0 [pid 10507] <... futex resumed>) = 1 [pid 10506] <... memfd_create resumed>) = 5 [pid 10507] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10505] <... futex resumed>) = 0 [pid 10506] <... mmap resumed>) = 0x7f5527ca1000 [pid 10506] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10506] munmap(0x7f5527ca1000, 262144) = 0 [pid 10506] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10506] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 10506] close(5) = 0 [pid 10506] mkdir("./file1", 0777) = 0 [pid 10506] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10506] ioctl(6, LOOP_CLR_FD) = 0 [pid 10506] close(6) = 0 [pid 10506] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10505] exit_group(0 [pid 10506] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10507] <... futex resumed>) = ? [pid 10506] <... futex resumed>) = ? [pid 10505] <... exit_group resumed>) = ? [pid 10507] +++ exited with 0 +++ [pid 10506] +++ exited with 0 +++ [pid 10505] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10505, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1167/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1167/bus") = 0 [pid 5052] umount2("./1167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1167/binderfs") = 0 [pid 5052] umount2("./1167/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1167/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1167/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1167/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1167/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1167") = 0 [pid 5052] mkdir("./1168", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10508 ./strace-static-x86_64: Process 10508 attached [pid 10508] set_robust_list(0x555556d606a0, 24) = 0 [pid 10508] chdir("./1168") = 0 [pid 10508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10508] setpgid(0, 0) = 0 [pid 10508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10508] write(3, "1000", 4) = 4 [pid 10508] close(3) = 0 [pid 10508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10508] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10508] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [ 268.645177][T10506] loop0: detected capacity change from 0 to 512 [ 268.654716][T10506] ext4: Unknown parameter 'nouser_xattr' [pid 10508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10508] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10509 attached => {parent_tid=[10509]}, 88) = 10509 [pid 10509] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10508] rt_sigprocmask(SIG_SETMASK, [], [pid 10509] set_robust_list(0x7f55300e29a0, 24 [pid 10508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10509] <... set_robust_list resumed>) = 0 [pid 10508] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10509] rt_sigprocmask(SIG_SETMASK, [], [pid 10508] <... futex resumed>) = 0 [pid 10509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10508] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10508] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10509] memfd_create("syzkaller", 0 [pid 10508] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10509] <... memfd_create resumed>) = 3 [pid 10508] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10508] <... clone3 resumed> => {parent_tid=[10510]}, 88) = 10510 [pid 10508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10508] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10508] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10510 attached [pid 10510] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10510] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10510] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10509] <... write resumed>) = 262144 [pid 10510] <... open resumed>) = 4 [pid 10510] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10509] munmap(0x7f5527ca1000, 262144 [pid 10510] <... futex resumed>) = 1 [pid 10508] <... futex resumed>) = 0 [pid 10510] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10508] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10510] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10509] <... munmap resumed>) = 0 [pid 10510] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10510] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10509] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10510] <... futex resumed>) = 0 [pid 10508] <... futex resumed>) = 1 [pid 10510] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10508] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10509] <... openat resumed>) = 5 [pid 10509] ioctl(5, LOOP_SET_FD, 3 [pid 10508] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10510] <... futex resumed>) = 0 [pid 10508] <... futex resumed>) = 1 [pid 10510] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10508] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10510] <... open resumed>) = 6 [pid 10510] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10508] <... futex resumed>) = 0 [pid 10510] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10508] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10509] <... ioctl resumed>) = 0 [pid 10508] <... futex resumed>) = 0 [pid 10509] close(3 [pid 10508] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10509] <... close resumed>) = 0 [pid 10509] mkdir("./file1", 0777) = 0 [pid 10509] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10510] <... write resumed>) = -1 EIO (Input/output error) [pid 10510] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10509] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10510] <... futex resumed>) = 1 [pid 10509] ioctl(5, LOOP_CLR_FD [pid 10508] <... futex resumed>) = 0 [pid 10510] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10509] <... ioctl resumed>) = 0 [pid 10509] close(5) = 0 [pid 10509] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10509] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10508] exit_group(0 [pid 10510] <... futex resumed>) = ? [pid 10508] <... exit_group resumed>) = ? [pid 10510] +++ exited with 0 +++ [pid 10509] <... futex resumed>) = ? [pid 10509] +++ exited with 0 +++ [pid 10508] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10508, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 268.750882][T10509] loop0: detected capacity change from 0 to 512 [ 268.764069][T10510] I/O error, dev loop0, sector 248 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 268.777264][T10510] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 268.783789][T10509] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1168/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1168/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1168/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1168/bus") = 0 [pid 5052] umount2("./1168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1168/binderfs") = 0 [pid 5052] umount2("./1168/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1168/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1168/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1168/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1168/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1168") = 0 [pid 5052] mkdir("./1169", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10511 attached , child_tidptr=0x555556d60690) = 10511 [pid 10511] set_robust_list(0x555556d606a0, 24) = 0 [pid 10511] chdir("./1169") = 0 [pid 10511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10511] setpgid(0, 0) = 0 [pid 10511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10511] write(3, "1000", 4) = 4 [pid 10511] close(3) = 0 [pid 10511] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10511] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10511] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10511] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10511] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10511] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10511] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10512 attached [pid 10512] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10512] set_robust_list(0x7f55300e29a0, 24 [pid 10511] <... clone3 resumed> => {parent_tid=[10512]}, 88) = 10512 [pid 10512] <... set_robust_list resumed>) = 0 [pid 10511] rt_sigprocmask(SIG_SETMASK, [], [pid 10512] rt_sigprocmask(SIG_SETMASK, [], [pid 10511] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10511] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10512] memfd_create("syzkaller", 0 [pid 10511] <... futex resumed>) = 0 [pid 10511] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10512] <... memfd_create resumed>) = 3 [pid 10511] <... mmap resumed>) = 0x7f55300a1000 [pid 10512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10511] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10511] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10511] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10513]}, 88) = 10513 [pid 10511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10511] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10511] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10513 attached ) = 262144 [pid 10513] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10513] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10512] munmap(0x7f5527ca1000, 262144 [pid 10513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10512] <... munmap resumed>) = 0 [pid 10513] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10512] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10512] ioctl(5, LOOP_SET_FD, 3 [pid 10513] <... open resumed>) = 4 [pid 10513] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10513] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10511] <... futex resumed>) = 0 [pid 10511] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10513] <... futex resumed>) = 0 [pid 10512] <... ioctl resumed>) = 0 [pid 10511] <... futex resumed>) = 1 [pid 10513] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10512] close(3 [pid 10511] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10512] <... close resumed>) = 0 [pid 10513] <... mount resumed>) = 0 [pid 10513] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10512] mkdir("./file1", 0777 [pid 10511] <... futex resumed>) = 0 [pid 10513] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10512] <... mkdir resumed>) = 0 [pid 10511] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10513] <... open resumed>) = 3 [pid 10511] <... futex resumed>) = 0 [pid 10511] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10513] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10513] <... futex resumed>) = 0 [pid 10511] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10511] <... futex resumed>) = 0 [pid 10512] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10511] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10512] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10512] ioctl(5, LOOP_CLR_FD) = 0 [pid 10512] close(5) = 0 [pid 10512] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10512] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10513] <... write resumed>) = 262144 [pid 10513] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10511] <... futex resumed>) = 0 [pid 10513] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10511] exit_group(0 [pid 10513] <... futex resumed>) = ? [pid 10511] <... exit_group resumed>) = ? [pid 10513] +++ exited with 0 +++ [pid 10512] <... futex resumed>) = ? [pid 10512] +++ exited with 0 +++ [pid 10511] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10511, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1169/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 268.885902][T10512] loop0: detected capacity change from 0 to 512 [ 268.899835][T10512] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1169/bus") = 0 [pid 5052] umount2("./1169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1169/binderfs") = 0 [pid 5052] umount2("./1169/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1169/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1169/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1169/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1169/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1169") = 0 [pid 5052] mkdir("./1170", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10514 attached [pid 10514] set_robust_list(0x555556d606a0, 24) = 0 [pid 10514] chdir("./1170" [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10514 [pid 10514] <... chdir resumed>) = 0 [pid 10514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10514] setpgid(0, 0) = 0 [pid 10514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10514] write(3, "1000", 4) = 4 [pid 10514] close(3) = 0 [pid 10514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10514] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10514] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10514] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10514] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10515 attached => {parent_tid=[10515]}, 88) = 10515 [pid 10515] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10514] rt_sigprocmask(SIG_SETMASK, [], [pid 10515] set_robust_list(0x7f55300e29a0, 24 [pid 10514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10515] <... set_robust_list resumed>) = 0 [pid 10514] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10515] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10514] <... futex resumed>) = 0 [pid 10515] memfd_create("syzkaller", 0 [pid 10514] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10515] <... memfd_create resumed>) = 3 [pid 10514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10514] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10514] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10514] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10516]}, 88) = 10516 [pid 10514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10514] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10514] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10516 attached [pid 10516] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10516] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10516] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10516] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10516] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10514] <... futex resumed>) = 0 [pid 10514] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10516] <... futex resumed>) = 0 [pid 10516] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10514] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10515] <... write resumed>) = 262144 [pid 10516] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10516] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10514] <... futex resumed>) = 0 [pid 10514] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10516] <... futex resumed>) = 0 [pid 10514] <... futex resumed>) = 1 [pid 10516] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10516] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10514] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10516] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10514] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10516] <... futex resumed>) = 0 [pid 10514] <... futex resumed>) = 1 [pid 10516] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10515] munmap(0x7f5527ca1000, 262144 [pid 10514] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10516] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10515] <... munmap resumed>) = 0 [pid 10516] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10514] <... futex resumed>) = 0 [pid 10516] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10515] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10515] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10515] close(3) = 0 [pid 10515] mkdir("./file1", 0777) = 0 [pid 10515] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10515] ioctl(6, LOOP_CLR_FD) = 0 [pid 10515] close(6) = 0 [pid 10515] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10515] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10514] exit_group(0 [pid 10516] <... futex resumed>) = ? [pid 10516] +++ exited with 0 +++ [pid 10515] <... futex resumed>) = ? [pid 10514] <... exit_group resumed>) = ? [pid 10515] +++ exited with 0 +++ [pid 10514] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10514, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1170/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1170/bus") = 0 [pid 5052] umount2("./1170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1170/binderfs") = 0 [pid 5052] umount2("./1170/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1170/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1170/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1170/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1170/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1170") = 0 [pid 5052] mkdir("./1171", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 269.017078][T10515] loop0: detected capacity change from 0 to 512 [ 269.027012][T10515] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10517 attached [pid 10517] set_robust_list(0x555556d606a0, 24 [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10517 [pid 10517] <... set_robust_list resumed>) = 0 [pid 10517] chdir("./1171") = 0 [pid 10517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10517] setpgid(0, 0) = 0 [pid 10517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10517] write(3, "1000", 4) = 4 [pid 10517] close(3) = 0 [pid 10517] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10517] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10517] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10517] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10517] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10517] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10518]}, 88) = 10518 [pid 10517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10517] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10517] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10517] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 10518 attached ) = 0 [pid 10517] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10518] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10517] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10518] <... rseq resumed>) = 0 [pid 10518] set_robust_list(0x7f55300e29a0, 24 [pid 10517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10518] <... set_robust_list resumed>) = 0 [pid 10518] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10518] memfd_create("syzkaller", 0./strace-static-x86_64: Process 10519 attached ) = 3 [pid 10518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10519] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10517] <... clone3 resumed> => {parent_tid=[10519]}, 88) = 10519 [pid 10519] <... rseq resumed>) = 0 [pid 10517] rt_sigprocmask(SIG_SETMASK, [], [pid 10519] set_robust_list(0x7f55300c19a0, 24 [pid 10517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10519] <... set_robust_list resumed>) = 0 [pid 10517] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10519] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10519] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10517] <... futex resumed>) = 0 [pid 10519] <... open resumed>) = 4 [pid 10517] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10519] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10517] <... futex resumed>) = 0 [pid 10517] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10519] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10517] <... futex resumed>) = 0 [pid 10517] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10519] <... mount resumed>) = 0 [pid 10519] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10518] <... write resumed>) = 262144 [pid 10517] <... futex resumed>) = 0 [pid 10518] munmap(0x7f5527ca1000, 262144 [pid 10517] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10519] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10517] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10519] <... open resumed>) = 5 [pid 10519] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10518] <... munmap resumed>) = 0 [pid 10517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10519] <... futex resumed>) = 0 [pid 10517] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10518] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10517] <... futex resumed>) = 0 [pid 10519] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10517] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10518] <... openat resumed>) = 6 [pid 10519] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10519] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10518] ioctl(6, LOOP_SET_FD, 3 [pid 10517] <... futex resumed>) = 0 [pid 10518] <... ioctl resumed>) = 0 [pid 10518] close(3) = 0 [pid 10518] mkdir("./file1", 0777) = 0 [pid 10518] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10518] ioctl(6, LOOP_CLR_FD) = 0 [pid 10518] close(6) = 0 [pid 10518] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10518] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10517] exit_group(0 [pid 10518] <... futex resumed>) = ? [pid 10517] <... exit_group resumed>) = ? [pid 10518] +++ exited with 0 +++ [pid 10519] <... futex resumed>) = ? [pid 10519] +++ exited with 0 +++ [pid 10517] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10517, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1171/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1171/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1171/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1171/bus") = 0 [pid 5052] umount2("./1171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1171/binderfs") = 0 [pid 5052] umount2("./1171/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1171/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1171/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1171/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1171/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1171") = 0 [ 269.127815][T10518] loop0: detected capacity change from 0 to 512 [ 269.137903][T10518] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1172", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10520 attached , child_tidptr=0x555556d60690) = 10520 [pid 10520] set_robust_list(0x555556d606a0, 24) = 0 [pid 10520] chdir("./1172") = 0 [pid 10520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10520] setpgid(0, 0) = 0 [pid 10520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10520] write(3, "1000", 4) = 4 [pid 10520] close(3) = 0 [pid 10520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10520] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10520] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10520] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10520] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10521 attached => {parent_tid=[10521]}, 88) = 10521 [pid 10520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10520] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10520] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10520] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10522 attached [pid 10521] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10522] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10522] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10522] rt_sigprocmask(SIG_SETMASK, [], [pid 10520] <... clone3 resumed> => {parent_tid=[10522]}, 88) = 10522 [pid 10522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10520] rt_sigprocmask(SIG_SETMASK, [], [pid 10522] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10520] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10522] <... futex resumed>) = 0 [pid 10520] <... futex resumed>) = 1 [pid 10522] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10520] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10521] <... rseq resumed>) = 0 [pid 10521] set_robust_list(0x7f55300e29a0, 24 [pid 10522] <... open resumed>) = 3 [pid 10521] <... set_robust_list resumed>) = 0 [pid 10521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10521] memfd_create("syzkaller", 0 [pid 10522] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10521] <... memfd_create resumed>) = 4 [pid 10520] <... futex resumed>) = 0 [pid 10521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10522] <... futex resumed>) = 1 [pid 10522] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10520] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10521] <... mmap resumed>) = 0x7f5527ca1000 [pid 10522] <... mount resumed>) = 0 [pid 10520] <... futex resumed>) = 0 [pid 10520] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10522] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10520] <... futex resumed>) = 0 [pid 10522] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10521] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10520] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10522] <... open resumed>) = 5 [pid 10520] <... futex resumed>) = 0 [pid 10520] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10522] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10520] <... futex resumed>) = 0 [pid 10522] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10520] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10522] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10520] <... futex resumed>) = 0 [pid 10522] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10520] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10522] <... futex resumed>) = 0 [pid 10520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10522] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10521] <... write resumed>) = 262144 [pid 10521] munmap(0x7f5527ca1000, 262144) = 0 [pid 10521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10521] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10521] close(4) = 0 [pid 10521] mkdir("./file1", 0777) = 0 [pid 10521] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10521] ioctl(6, LOOP_CLR_FD) = 0 [pid 10521] close(6) = 0 [pid 10521] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10521] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10520] exit_group(0 [pid 10522] <... futex resumed>) = ? [pid 10520] <... exit_group resumed>) = ? [pid 10521] <... futex resumed>) = ? [pid 10522] +++ exited with 0 +++ [pid 10521] +++ exited with 0 +++ [pid 10520] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10520, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1172/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1172/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1172/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1172/bus") = 0 [pid 5052] umount2("./1172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1172/binderfs") = 0 [pid 5052] umount2("./1172/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1172/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1172/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1172/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1172/file1") = 0 [ 269.232863][T10521] loop0: detected capacity change from 0 to 512 [ 269.242176][T10521] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1172") = 0 [pid 5052] mkdir("./1173", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10523 ./strace-static-x86_64: Process 10523 attached [pid 10523] set_robust_list(0x555556d606a0, 24) = 0 [pid 10523] chdir("./1173") = 0 [pid 10523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10523] setpgid(0, 0) = 0 [pid 10523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10523] write(3, "1000", 4) = 4 [pid 10523] close(3) = 0 [pid 10523] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10523] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10523] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10523] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10523] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10523] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10524]}, 88) = 10524 [pid 10523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10523] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10524 attached ) = 0 [pid 10524] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10523] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10524] <... rseq resumed>) = 0 [pid 10524] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10524] memfd_create("syzkaller", 0 [pid 10523] <... futex resumed>) = 0 [pid 10524] <... memfd_create resumed>) = 3 [pid 10524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5527ca1000 [pid 10523] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10523] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10525 attached => {parent_tid=[10525]}, 88) = 10525 [pid 10523] rt_sigprocmask(SIG_SETMASK, [], [pid 10525] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053) = 0 [pid 10523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10525] set_robust_list(0x7f5527cc19a0, 24 [pid 10524] <... write resumed>) = 262144 [pid 10523] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10525] <... set_robust_list resumed>) = 0 [pid 10523] <... futex resumed>) = 0 [pid 10525] rt_sigprocmask(SIG_SETMASK, [], [pid 10524] munmap(0x7f5527cc2000, 262144 [pid 10523] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10525] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10525] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10524] <... munmap resumed>) = 0 [pid 10525] <... futex resumed>) = 1 [pid 10524] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10523] <... futex resumed>) = 0 [pid 10525] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10524] <... openat resumed>) = 5 [pid 10523] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10525] <... futex resumed>) = 0 [pid 10523] <... futex resumed>) = 1 [pid 10525] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10524] ioctl(5, LOOP_SET_FD, 3 [pid 10523] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10525] <... mount resumed>) = 0 [pid 10525] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10525] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10523] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10525] <... futex resumed>) = 0 [pid 10525] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10523] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10525] <... open resumed>) = 6 [pid 10525] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10523] <... futex resumed>) = 0 [pid 10525] <... futex resumed>) = 1 [pid 10523] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10525] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10523] <... futex resumed>) = 0 [pid 10523] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10524] <... ioctl resumed>) = 0 [pid 10524] close(3) = 0 [pid 10524] mkdir("./file1", 0777) = 0 [pid 10524] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10525] <... write resumed>) = 262144 [pid 10524] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10525] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10524] ioctl(5, LOOP_CLR_FD [pid 10525] <... futex resumed>) = 1 [pid 10525] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10523] <... futex resumed>) = 0 [pid 10524] <... ioctl resumed>) = 0 [pid 10524] close(5) = 0 [pid 10524] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10523] exit_group(0 [pid 10524] <... futex resumed>) = 0 [pid 10524] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10523] <... exit_group resumed>) = ? [pid 10524] <... futex resumed>) = ? [pid 10524] +++ exited with 0 +++ [pid 10525] <... futex resumed>) = ? [pid 10525] +++ exited with 0 +++ [pid 10523] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10523, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1173/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1173/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1173/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1173/bus") = 0 [pid 5052] umount2("./1173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1173/binderfs") = 0 [pid 5052] umount2("./1173/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1173/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1173/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 269.352375][T10524] loop0: detected capacity change from 0 to 512 [ 269.364177][T10524] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "./1173/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1173/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1173") = 0 [pid 5052] mkdir("./1174", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10526 attached , child_tidptr=0x555556d60690) = 10526 [pid 10526] set_robust_list(0x555556d606a0, 24) = 0 [pid 10526] chdir("./1174") = 0 [pid 10526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10526] setpgid(0, 0) = 0 [pid 10526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10526] write(3, "1000", 4) = 4 [pid 10526] close(3) = 0 [pid 10526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10526] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10526] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10526] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10526] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10526] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10527 attached [pid 10527] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10526] <... clone3 resumed> => {parent_tid=[10527]}, 88) = 10527 [pid 10527] <... rseq resumed>) = 0 [pid 10526] rt_sigprocmask(SIG_SETMASK, [], [pid 10527] set_robust_list(0x7f55300e29a0, 24 [pid 10526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10527] <... set_robust_list resumed>) = 0 [pid 10526] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10527] rt_sigprocmask(SIG_SETMASK, [], [pid 10526] <... futex resumed>) = 0 [pid 10527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10526] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10527] memfd_create("syzkaller", 0 [pid 10526] <... futex resumed>) = 0 [pid 10527] <... memfd_create resumed>) = 3 [pid 10526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10526] <... mmap resumed>) = 0x7f55300a1000 [pid 10527] <... mmap resumed>) = 0x7f5527ca1000 [pid 10526] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10526] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10528]}, 88) = 10528 [pid 10526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10526] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10526] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10528 attached [pid 10527] <... write resumed>) = 262144 [pid 10527] munmap(0x7f5527ca1000, 262144 [pid 10528] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10527] <... munmap resumed>) = 0 [pid 10528] <... rseq resumed>) = 0 [pid 10527] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10527] ioctl(4, LOOP_SET_FD, 3 [pid 10528] set_robust_list(0x7f55300c19a0, 24 [pid 10527] <... ioctl resumed>) = 0 [pid 10528] <... set_robust_list resumed>) = 0 [pid 10527] close(3 [pid 10528] rt_sigprocmask(SIG_SETMASK, [], [pid 10527] <... close resumed>) = 0 [pid 10528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10527] mkdir("./file1", 0777 [pid 10528] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10527] <... mkdir resumed>) = 0 [pid 10527] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10528] <... open resumed>) = 3 [pid 10528] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10526] <... futex resumed>) = 0 [pid 10528] <... futex resumed>) = 1 [pid 10528] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10526] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10526] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10528] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10528] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10526] <... futex resumed>) = 0 [pid 10526] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10528] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10526] <... futex resumed>) = 0 [pid 10527] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10526] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10528] <... open resumed>) = 5 [pid 10527] ioctl(4, LOOP_CLR_FD [pid 10528] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10526] <... futex resumed>) = 0 [pid 10528] <... futex resumed>) = 1 [pid 10526] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10528] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10526] <... futex resumed>) = 0 [pid 10527] <... ioctl resumed>) = 0 [pid 10526] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10527] close(4) = 0 [pid 10527] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10527] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10528] <... write resumed>) = 262144 [pid 10528] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10526] <... futex resumed>) = 0 [pid 10528] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10526] exit_group(0 [pid 10528] <... futex resumed>) = ? [pid 10527] <... futex resumed>) = ? [pid 10526] <... exit_group resumed>) = ? [pid 10527] +++ exited with 0 +++ [pid 10528] +++ exited with 0 +++ [pid 10526] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10526, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1174/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1174/bus") = 0 [pid 5052] umount2("./1174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1174/binderfs") = 0 [pid 5052] umount2("./1174/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1174/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1174/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1174/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1174/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 269.462964][T10527] loop0: detected capacity change from 0 to 512 [ 269.472570][T10527] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1174") = 0 [pid 5052] mkdir("./1175", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10529 attached , child_tidptr=0x555556d60690) = 10529 [pid 10529] set_robust_list(0x555556d606a0, 24) = 0 [pid 10529] chdir("./1175") = 0 [pid 10529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10529] setpgid(0, 0) = 0 [pid 10529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10529] write(3, "1000", 4) = 4 [pid 10529] close(3) = 0 [pid 10529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10529] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10529] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10529] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10529] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10529] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10529] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10530 attached => {parent_tid=[10530]}, 88) = 10530 [pid 10530] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10529] rt_sigprocmask(SIG_SETMASK, [], [pid 10530] <... rseq resumed>) = 0 [pid 10530] set_robust_list(0x7f55300e29a0, 24 [pid 10529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10530] <... set_robust_list resumed>) = 0 [pid 10529] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10530] rt_sigprocmask(SIG_SETMASK, [], [pid 10529] <... futex resumed>) = 0 [pid 10530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10529] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10530] memfd_create("syzkaller", 0 [pid 10529] <... futex resumed>) = 0 [pid 10529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10530] <... memfd_create resumed>) = 3 [pid 10529] <... mmap resumed>) = 0x7f55300a1000 [pid 10530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10529] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10530] <... mmap resumed>) = 0x7f5527ca1000 [pid 10529] <... mprotect resumed>) = 0 [pid 10530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10529] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10529] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10531]}, 88) = 10531 [pid 10529] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10529] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10529] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10531 attached [pid 10531] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10530] <... write resumed>) = 262144 [pid 10530] munmap(0x7f5527ca1000, 262144 [pid 10531] <... rseq resumed>) = 0 [pid 10531] set_robust_list(0x7f55300c19a0, 24 [pid 10530] <... munmap resumed>) = 0 [pid 10531] <... set_robust_list resumed>) = 0 [pid 10531] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10531] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10530] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10530] ioctl(5, LOOP_SET_FD, 3 [pid 10531] <... open resumed>) = 4 [pid 10531] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10529] <... futex resumed>) = 0 [pid 10531] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10529] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10529] <... futex resumed>) = 0 [pid 10531] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10529] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10531] <... mount resumed>) = 0 [pid 10531] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10531] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10529] <... futex resumed>) = 0 [pid 10529] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10531] <... futex resumed>) = 0 [pid 10529] <... futex resumed>) = 1 [pid 10531] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10529] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10531] <... open resumed>) = 6 [pid 10530] <... ioctl resumed>) = 0 [pid 10531] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10529] <... futex resumed>) = 0 [pid 10529] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10531] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10529] <... futex resumed>) = 0 [pid 10529] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10530] close(3) = 0 [pid 10530] mkdir("./file1", 0777) = 0 [pid 10530] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10530] ioctl(5, LOOP_CLR_FD) = 0 [pid 10530] close(5) = 0 [pid 10530] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10530] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10531] <... write resumed>) = 262144 [pid 10531] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10529] <... futex resumed>) = 0 [pid 10531] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10529] exit_group(0 [pid 10531] <... futex resumed>) = ? [pid 10530] <... futex resumed>) = ? [pid 10529] <... exit_group resumed>) = ? [pid 10531] +++ exited with 0 +++ [pid 10530] +++ exited with 0 +++ [pid 10529] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10529, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1175/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1175/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1175/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1175/bus") = 0 [pid 5052] umount2("./1175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1175/binderfs") = 0 [pid 5052] umount2("./1175/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1175/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1175/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1175/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1175/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1175") = 0 [pid 5052] mkdir("./1176", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 269.561175][T10530] loop0: detected capacity change from 0 to 512 [ 269.573526][T10530] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10532 attached [pid 10532] set_robust_list(0x555556d606a0, 24 [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10532 [pid 10532] <... set_robust_list resumed>) = 0 [pid 10532] chdir("./1176") = 0 [pid 10532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10532] setpgid(0, 0) = 0 [pid 10532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10532] write(3, "1000", 4) = 4 [pid 10532] close(3) = 0 [pid 10532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10532] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10532] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10532] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10532] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10533]}, 88) = 10533 ./strace-static-x86_64: Process 10533 attached [pid 10533] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10532] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10532] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10533] set_robust_list(0x7f55300e29a0, 24 [pid 10532] <... mmap resumed>) = 0x7f55300a1000 [pid 10533] <... set_robust_list resumed>) = 0 [pid 10533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10532] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10533] memfd_create("syzkaller", 0 [pid 10532] <... mprotect resumed>) = 0 [pid 10532] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10533] <... memfd_create resumed>) = 3 [pid 10533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10532] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10534 attached [pid 10533] <... mmap resumed>) = 0x7f5527ca1000 [pid 10534] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10532] <... clone3 resumed> => {parent_tid=[10534]}, 88) = 10534 [pid 10534] <... rseq resumed>) = 0 [pid 10532] rt_sigprocmask(SIG_SETMASK, [], [pid 10534] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10532] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10534] rt_sigprocmask(SIG_SETMASK, [], [pid 10532] <... futex resumed>) = 0 [pid 10534] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10532] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10534] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10534] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10532] <... futex resumed>) = 0 [pid 10532] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10534] <... futex resumed>) = 1 [pid 10532] <... futex resumed>) = 0 [pid 10534] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10532] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10534] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10532] <... futex resumed>) = 0 [pid 10532] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10534] <... futex resumed>) = 1 [pid 10532] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10534] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10534] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10532] <... futex resumed>) = 0 [pid 10534] <... futex resumed>) = 1 [pid 10534] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10532] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10534] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10532] <... futex resumed>) = 0 [pid 10534] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10532] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10534] <... futex resumed>) = 0 [pid 10532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10534] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10533] <... write resumed>) = 262144 [pid 10533] munmap(0x7f5527ca1000, 262144) = 0 [pid 10533] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10533] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10533] close(3) = 0 [pid 10533] mkdir("./file1", 0777) = 0 [pid 10533] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10533] ioctl(6, LOOP_CLR_FD) = 0 [pid 10533] close(6) = 0 [pid 10533] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10533] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10532] exit_group(0 [pid 10533] <... futex resumed>) = ? [pid 10532] <... exit_group resumed>) = ? [pid 10533] +++ exited with 0 +++ [pid 10534] <... futex resumed>) = ? [pid 10534] +++ exited with 0 +++ [pid 10532] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10532, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1176/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1176/bus") = 0 [pid 5052] umount2("./1176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1176/binderfs") = 0 [pid 5052] umount2("./1176/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1176/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1176/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1176/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1176/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1176") = 0 [pid 5052] mkdir("./1177", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10535 attached , child_tidptr=0x555556d60690) = 10535 [pid 10535] set_robust_list(0x555556d606a0, 24) = 0 [pid 10535] chdir("./1177") = 0 [pid 10535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10535] setpgid(0, 0) = 0 [pid 10535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10535] write(3, "1000", 4) = 4 [pid 10535] close(3) = 0 [ 269.671404][T10533] loop0: detected capacity change from 0 to 512 [ 269.680724][T10533] ext4: Unknown parameter 'nouser_xattr' [pid 10535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10535] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10535] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10535] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10535] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10535] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10535] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10536 attached => {parent_tid=[10536]}, 88) = 10536 [pid 10536] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10535] rt_sigprocmask(SIG_SETMASK, [], [pid 10536] set_robust_list(0x7f55300e29a0, 24 [pid 10535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10536] <... set_robust_list resumed>) = 0 [pid 10535] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10536] rt_sigprocmask(SIG_SETMASK, [], [pid 10535] <... futex resumed>) = 0 [pid 10536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10535] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10536] memfd_create("syzkaller", 0 [pid 10535] <... futex resumed>) = 0 [pid 10535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10536] <... memfd_create resumed>) = 3 [pid 10535] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10535] <... mprotect resumed>) = 0 [pid 10536] <... mmap resumed>) = 0x7f5527ca1000 [pid 10535] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10535] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10535] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10537]}, 88) = 10537 [pid 10535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10535] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10535] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10537 attached [pid 10536] <... write resumed>) = 262144 [pid 10536] munmap(0x7f5527ca1000, 262144) = 0 [pid 10536] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10536] ioctl(4, LOOP_SET_FD, 3 [pid 10537] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10537] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10537] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10536] <... ioctl resumed>) = 0 [pid 10536] close(3) = 0 [pid 10536] mkdir("./file1", 0777) = 0 [pid 10536] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10537] <... open resumed>) = 3 [pid 10537] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10537] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10535] <... futex resumed>) = 0 [pid 10535] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10537] <... futex resumed>) = 0 [pid 10535] <... futex resumed>) = 1 [pid 10537] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10535] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10537] <... mount resumed>) = 0 [pid 10537] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10535] <... futex resumed>) = 0 [pid 10535] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10537] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10535] <... futex resumed>) = 0 [pid 10537] <... open resumed>) = 5 [pid 10535] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10537] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10537] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10535] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10535] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10537] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10536] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10536] ioctl(4, LOOP_CLR_FD) = 0 [pid 10536] close(4) = 0 [pid 10536] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10536] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10537] <... write resumed>) = 262144 [pid 10537] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10535] <... futex resumed>) = 0 [pid 10537] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10535] exit_group(0) = ? [pid 10537] <... futex resumed>) = ? [pid 10536] <... futex resumed>) = ? [pid 10537] +++ exited with 0 +++ [pid 10536] +++ exited with 0 +++ [pid 10535] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10535, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1177/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1177/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1177/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 269.755932][T10536] loop0: detected capacity change from 0 to 512 [ 269.767010][T10536] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1177/bus") = 0 [pid 5052] umount2("./1177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1177/binderfs") = 0 [pid 5052] umount2("./1177/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1177/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1177/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1177/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1177/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1177") = 0 [pid 5052] mkdir("./1178", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10538 attached , child_tidptr=0x555556d60690) = 10538 [pid 10538] set_robust_list(0x555556d606a0, 24) = 0 [pid 10538] chdir("./1178") = 0 [pid 10538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10538] setpgid(0, 0) = 0 [pid 10538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10538] write(3, "1000", 4) = 4 [pid 10538] close(3) = 0 [pid 10538] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10538] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10538] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10538] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10538] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10538] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10539]}, 88) = 10539 ./strace-static-x86_64: Process 10539 attached [pid 10538] rt_sigprocmask(SIG_SETMASK, [], [pid 10539] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10539] <... rseq resumed>) = 0 [pid 10538] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10539] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10538] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10539] memfd_create("syzkaller", 0 [pid 10538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10539] <... memfd_create resumed>) = 3 [pid 10538] <... mmap resumed>) = 0x7f55300a1000 [pid 10539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10538] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10539] <... mmap resumed>) = 0x7f5527ca1000 [pid 10538] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10540 attached [pid 10540] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10538] <... clone3 resumed> => {parent_tid=[10540]}, 88) = 10540 [pid 10540] <... rseq resumed>) = 0 [pid 10538] rt_sigprocmask(SIG_SETMASK, [], [pid 10540] set_robust_list(0x7f55300c19a0, 24 [pid 10538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10540] <... set_robust_list resumed>) = 0 [pid 10538] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10540] rt_sigprocmask(SIG_SETMASK, [], [pid 10538] <... futex resumed>) = 0 [pid 10540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10538] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10540] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10540] <... open resumed>) = 4 [pid 10540] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10538] <... futex resumed>) = 0 [pid 10540] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10538] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10540] <... mount resumed>) = 0 [pid 10538] <... futex resumed>) = 0 [pid 10538] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10540] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10539] <... write resumed>) = 262144 [pid 10540] <... futex resumed>) = 1 [pid 10539] munmap(0x7f5527ca1000, 262144 [pid 10540] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10538] <... futex resumed>) = 0 [pid 10538] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10539] <... munmap resumed>) = 0 [pid 10540] <... futex resumed>) = 0 [pid 10538] <... futex resumed>) = 1 [pid 10540] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10539] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10538] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10539] <... openat resumed>) = 5 [pid 10540] <... open resumed>) = 6 [pid 10539] ioctl(5, LOOP_SET_FD, 3 [pid 10540] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10540] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10538] <... futex resumed>) = 0 [pid 10538] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10540] <... futex resumed>) = 0 [pid 10540] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10539] <... ioctl resumed>) = 0 [pid 10538] <... futex resumed>) = 1 [pid 10538] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10539] close(3) = 0 [pid 10539] mkdir("./file1", 0777) = 0 [pid 10539] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10540] <... write resumed>) = 262144 [pid 10540] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10538] <... futex resumed>) = 0 [pid 10540] <... futex resumed>) = 1 [pid 10540] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10539] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10539] ioctl(5, LOOP_CLR_FD) = 0 [pid 10539] close(5) = 0 [pid 10539] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10539] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10538] exit_group(0 [pid 10540] <... futex resumed>) = ? [pid 10539] <... futex resumed>) = ? [pid 10538] <... exit_group resumed>) = ? [pid 10540] +++ exited with 0 +++ [pid 10539] +++ exited with 0 +++ [pid 10538] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10538, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1178/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1178/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1178/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1178/bus") = 0 [pid 5052] umount2("./1178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1178/binderfs") = 0 [pid 5052] umount2("./1178/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1178/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1178/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1178/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1178/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1178") = 0 [pid 5052] mkdir("./1179", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 269.882630][T10539] loop0: detected capacity change from 0 to 512 [ 269.895445][T10539] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10541 attached , child_tidptr=0x555556d60690) = 10541 [pid 10541] set_robust_list(0x555556d606a0, 24) = 0 [pid 10541] chdir("./1179") = 0 [pid 10541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10541] setpgid(0, 0) = 0 [pid 10541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10541] write(3, "1000", 4) = 4 [pid 10541] close(3) = 0 [pid 10541] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10541] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10541] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10541] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10541] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10541] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10542 attached => {parent_tid=[10542]}, 88) = 10542 [pid 10541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10541] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10541] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10542] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10541] <... mmap resumed>) = 0x7f55300a1000 [pid 10541] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10542] <... rseq resumed>) = 0 [pid 10541] <... mprotect resumed>) = 0 [pid 10541] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10542] set_robust_list(0x7f55300e29a0, 24 [pid 10541] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10542] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 10543 attached [pid 10542] rt_sigprocmask(SIG_SETMASK, [], [pid 10543] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10543] <... rseq resumed>) = 0 [pid 10541] <... clone3 resumed> => {parent_tid=[10543]}, 88) = 10543 [pid 10543] set_robust_list(0x7f55300c19a0, 24 [pid 10542] memfd_create("syzkaller", 0 [pid 10541] rt_sigprocmask(SIG_SETMASK, [], [pid 10543] <... set_robust_list resumed>) = 0 [pid 10541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10541] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10541] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10542] <... memfd_create resumed>) = 3 [pid 10543] rt_sigprocmask(SIG_SETMASK, [], [pid 10542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10543] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10542] <... mmap resumed>) = 0x7f5527ca1000 [pid 10543] <... open resumed>) = 4 [pid 10542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10543] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10543] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10541] <... futex resumed>) = 0 [pid 10541] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10543] <... futex resumed>) = 0 [pid 10541] <... futex resumed>) = 1 [pid 10543] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10541] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10543] <... mount resumed>) = 0 [pid 10543] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10541] <... futex resumed>) = 0 [pid 10543] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10541] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10541] <... futex resumed>) = 0 [pid 10543] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10542] <... write resumed>) = 262144 [pid 10543] <... open resumed>) = 5 [pid 10541] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10543] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10543] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10542] munmap(0x7f5527ca1000, 262144 [pid 10541] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10542] <... munmap resumed>) = 0 [pid 10542] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10542] ioctl(6, LOOP_SET_FD, 3 [pid 10541] <... futex resumed>) = 1 [pid 10543] <... futex resumed>) = 0 [pid 10541] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10543] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10543] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10541] <... futex resumed>) = 0 [pid 10543] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10542] <... ioctl resumed>) = 0 [pid 10542] close(3) = 0 [pid 10542] mkdir("./file1", 0777) = 0 [pid 10542] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10542] ioctl(6, LOOP_CLR_FD) = 0 [pid 10542] close(6) = 0 [pid 10542] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10542] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10541] exit_group(0 [pid 10543] <... futex resumed>) = ? [pid 10542] <... futex resumed>) = ? [pid 10541] <... exit_group resumed>) = ? [pid 10543] +++ exited with 0 +++ [pid 10542] +++ exited with 0 +++ [pid 10541] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10541, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1179/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1179/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1179/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1179/bus") = 0 [pid 5052] umount2("./1179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1179/binderfs") = 0 [pid 5052] umount2("./1179/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1179/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1179/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1179/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1179/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1179") = 0 [pid 5052] mkdir("./1180", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 269.990418][T10542] loop0: detected capacity change from 0 to 512 [ 269.999331][T10542] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10544 attached , child_tidptr=0x555556d60690) = 10544 [pid 10544] set_robust_list(0x555556d606a0, 24) = 0 [pid 10544] chdir("./1180") = 0 [pid 10544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10544] setpgid(0, 0) = 0 [pid 10544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10544] write(3, "1000", 4) = 4 [pid 10544] close(3) = 0 [pid 10544] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10544] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10544] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10544] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10544] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10545 attached => {parent_tid=[10545]}, 88) = 10545 [pid 10544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10544] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10544] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10544] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10544] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10545] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10544] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10546 attached [pid 10546] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10546] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10544] <... clone3 resumed> => {parent_tid=[10546]}, 88) = 10546 [pid 10546] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10544] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10546] <... futex resumed>) = 0 [pid 10544] <... futex resumed>) = 1 [pid 10546] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10544] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10546] <... open resumed>) = 3 [pid 10546] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10544] <... futex resumed>) = 0 [pid 10546] <... futex resumed>) = 1 [pid 10545] <... rseq resumed>) = 0 [pid 10546] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10545] set_robust_list(0x7f55300e29a0, 24 [pid 10544] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10546] <... mount resumed>) = 0 [pid 10545] <... set_robust_list resumed>) = 0 [pid 10544] <... futex resumed>) = 0 [pid 10545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10544] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10546] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10544] <... futex resumed>) = 0 [pid 10544] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10545] memfd_create("syzkaller", 0 [pid 10544] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10546] <... futex resumed>) = 1 [pid 10545] <... memfd_create resumed>) = 4 [pid 10546] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10546] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10544] <... futex resumed>) = 0 [pid 10546] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10544] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10544] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10546] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10546] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10545] <... mmap resumed>) = 0x7f5527ca1000 [pid 10546] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10544] <... futex resumed>) = 0 [pid 10546] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10545] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10545] munmap(0x7f5527ca1000, 262144) = 0 [pid 10545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10545] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10545] close(4) = 0 [pid 10545] mkdir("./file1", 0777) = 0 [pid 10545] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10545] ioctl(6, LOOP_CLR_FD) = 0 [pid 10545] close(6) = 0 [pid 10545] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10545] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10544] exit_group(0) = ? [pid 10546] <... futex resumed>) = ? [pid 10546] +++ exited with 0 +++ [pid 10545] <... futex resumed>) = ? [pid 10545] +++ exited with 0 +++ [pid 10544] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10544, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1180/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1180/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1180/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1180/bus") = 0 [pid 5052] umount2("./1180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1180/binderfs") = 0 [pid 5052] umount2("./1180/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1180/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1180/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1180/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1180/file1") = 0 [ 270.109177][T10545] loop0: detected capacity change from 0 to 512 [ 270.122333][T10545] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1180") = 0 [pid 5052] mkdir("./1181", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10547 attached , child_tidptr=0x555556d60690) = 10547 [pid 10547] set_robust_list(0x555556d606a0, 24) = 0 [pid 10547] chdir("./1181") = 0 [pid 10547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10547] setpgid(0, 0) = 0 [pid 10547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10547] write(3, "1000", 4) = 4 [pid 10547] close(3) = 0 [pid 10547] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10547] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10547] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10547] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10547] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10547] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10547] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10548 attached [pid 10548] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10547] <... clone3 resumed> => {parent_tid=[10548]}, 88) = 10548 [pid 10548] <... rseq resumed>) = 0 [pid 10548] set_robust_list(0x7f55300e29a0, 24 [pid 10547] rt_sigprocmask(SIG_SETMASK, [], [pid 10548] <... set_robust_list resumed>) = 0 [pid 10547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10548] rt_sigprocmask(SIG_SETMASK, [], [pid 10547] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10547] <... futex resumed>) = 0 [pid 10547] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10548] memfd_create("syzkaller", 0 [pid 10547] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10548] <... memfd_create resumed>) = 3 [pid 10547] <... mprotect resumed>) = 0 [pid 10547] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10547] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10548] <... mmap resumed>) = 0x7f5527ca1000 [pid 10547] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10549]}, 88) = 10549 [pid 10547] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10547] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10547] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10549 attached [pid 10549] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10549] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10549] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10548] <... write resumed>) = 262144 [pid 10548] munmap(0x7f5527ca1000, 262144 [pid 10549] <... open resumed>) = 4 [pid 10549] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10548] <... munmap resumed>) = 0 [pid 10547] <... futex resumed>) = 0 [pid 10547] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10547] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10549] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10548] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10549] <... mount resumed>) = 0 [pid 10549] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10547] <... futex resumed>) = 0 [pid 10549] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10548] <... openat resumed>) = 5 [pid 10548] ioctl(5, LOOP_SET_FD, 3 [pid 10547] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10549] <... futex resumed>) = 0 [pid 10547] <... futex resumed>) = 1 [pid 10549] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10547] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10549] <... open resumed>) = 6 [pid 10549] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10547] <... futex resumed>) = 0 [pid 10549] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10547] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10549] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10547] <... futex resumed>) = 0 [pid 10547] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10548] <... ioctl resumed>) = 0 [pid 10548] close(3) = 0 [pid 10548] mkdir("./file1", 0777) = 0 [pid 10548] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10549] <... write resumed>) = 262144 [pid 10549] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10549] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10547] <... futex resumed>) = 0 [pid 10548] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10548] ioctl(5, LOOP_CLR_FD) = 0 [pid 10548] close(5) = 0 [pid 10548] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10548] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10547] exit_group(0 [pid 10548] <... futex resumed>) = ? [pid 10547] <... exit_group resumed>) = ? [pid 10548] +++ exited with 0 +++ [pid 10549] <... futex resumed>) = ? [pid 10549] +++ exited with 0 +++ [pid 10547] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10547, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1181/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1181/bus") = 0 [pid 5052] umount2("./1181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1181/binderfs") = 0 [pid 5052] umount2("./1181/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1181/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1181/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1181/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 270.211269][T10548] loop0: detected capacity change from 0 to 512 [ 270.227017][T10548] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1181/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1181") = 0 [pid 5052] mkdir("./1182", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10550 attached , child_tidptr=0x555556d60690) = 10550 [pid 10550] set_robust_list(0x555556d606a0, 24) = 0 [pid 10550] chdir("./1182") = 0 [pid 10550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10550] setpgid(0, 0) = 0 [pid 10550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10550] write(3, "1000", 4) = 4 [pid 10550] close(3) = 0 [pid 10550] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10550] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10550] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10550] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10550] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10550] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10550] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10551 attached => {parent_tid=[10551]}, 88) = 10551 [pid 10550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10550] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10550] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10551] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10550] <... mmap resumed>) = 0x7f55300a1000 [pid 10551] <... rseq resumed>) = 0 [pid 10550] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10551] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10550] <... mprotect resumed>) = 0 [pid 10551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10550] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10551] memfd_create("syzkaller", 0 [pid 10550] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10551] <... memfd_create resumed>) = 3 [pid 10550] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 10552 attached [pid 10552] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10551] <... mmap resumed>) = 0x7f5527ca1000 [pid 10550] <... clone3 resumed> => {parent_tid=[10552]}, 88) = 10552 [pid 10552] <... rseq resumed>) = 0 [pid 10550] rt_sigprocmask(SIG_SETMASK, [], [pid 10552] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10550] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10550] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10552] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10550] <... futex resumed>) = 0 [pid 10552] <... open resumed>) = 4 [pid 10550] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10552] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10550] <... futex resumed>) = 0 [pid 10552] <... futex resumed>) = 1 [pid 10552] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10550] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10552] <... mount resumed>) = 0 [pid 10550] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10552] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10552] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10550] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10550] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10552] <... futex resumed>) = 0 [pid 10552] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10550] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10551] <... write resumed>) = 262144 [pid 10552] <... open resumed>) = 5 [pid 10551] munmap(0x7f5527ca1000, 262144) = 0 [pid 10551] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10552] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10551] <... openat resumed>) = 6 [pid 10551] ioctl(6, LOOP_SET_FD, 3 [pid 10552] <... futex resumed>) = 1 [pid 10550] <... futex resumed>) = 0 [pid 10552] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10550] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10550] <... futex resumed>) = 0 [pid 10552] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10551] <... ioctl resumed>) = 0 [pid 10550] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10551] close(3) = 0 [pid 10551] mkdir("./file1", 0777) = 0 [pid 10551] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10552] <... write resumed>) = 262144 [pid 10552] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10551] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10552] <... futex resumed>) = 1 [pid 10551] ioctl(6, LOOP_CLR_FD [pid 10550] <... futex resumed>) = 0 [pid 10552] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10551] <... ioctl resumed>) = 0 [pid 10551] close(6) = 0 [pid 10551] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10551] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10550] exit_group(0) = ? [pid 10551] <... futex resumed>) = ? [pid 10551] +++ exited with 0 +++ [pid 10552] <... futex resumed>) = ? [pid 10552] +++ exited with 0 +++ [pid 10550] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10550, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1182/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1182/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1182/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1182/bus") = 0 [pid 5052] umount2("./1182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1182/binderfs") = 0 [pid 5052] umount2("./1182/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1182/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1182/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1182/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 270.328083][T10551] loop0: detected capacity change from 0 to 512 [ 270.338975][T10551] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1182/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1182") = 0 [pid 5052] mkdir("./1183", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10553 attached , child_tidptr=0x555556d60690) = 10553 [pid 10553] set_robust_list(0x555556d606a0, 24) = 0 [pid 10553] chdir("./1183") = 0 [pid 10553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10553] setpgid(0, 0) = 0 [pid 10553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10553] write(3, "1000", 4) = 4 [pid 10553] close(3) = 0 [pid 10553] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10553] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10553] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10553] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10553] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10554 attached => {parent_tid=[10554]}, 88) = 10554 [pid 10554] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10553] rt_sigprocmask(SIG_SETMASK, [], [pid 10554] set_robust_list(0x7f55300e29a0, 24 [pid 10553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10554] <... set_robust_list resumed>) = 0 [pid 10553] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10553] <... futex resumed>) = 0 [pid 10554] memfd_create("syzkaller", 0 [pid 10553] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10554] <... memfd_create resumed>) = 3 [pid 10553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10553] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10553] <... mprotect resumed>) = 0 [pid 10553] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10553] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10555 attached => {parent_tid=[10555]}, 88) = 10555 [pid 10553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10553] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10553] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10555] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10555] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10555] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10555] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10554] <... write resumed>) = 262144 [pid 10554] munmap(0x7f5527ca1000, 262144) = 0 [pid 10555] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10553] <... futex resumed>) = 0 [pid 10555] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10553] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10553] <... futex resumed>) = 0 [pid 10555] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10554] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10553] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10555] <... mount resumed>) = 0 [pid 10554] <... openat resumed>) = 5 [pid 10555] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10554] ioctl(5, LOOP_SET_FD, 3 [pid 10555] <... futex resumed>) = 1 [pid 10553] <... futex resumed>) = 0 [pid 10555] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10553] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10553] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10554] <... ioctl resumed>) = 0 [pid 10554] close(3) = 0 [pid 10554] mkdir("./file1", 0777) = 0 [pid 10554] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10555] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10555] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10553] <... futex resumed>) = 0 [pid 10555] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10553] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10555] <... futex resumed>) = 0 [pid 10555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10553] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10554] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10554] ioctl(5, LOOP_CLR_FD) = 0 [pid 10554] close(5) = 0 [pid 10554] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10554] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10555] <... write resumed>) = 262144 [pid 10555] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10553] <... futex resumed>) = 0 [pid 10555] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10553] exit_group(0 [pid 10555] <... futex resumed>) = ? [pid 10554] <... futex resumed>) = ? [pid 10553] <... exit_group resumed>) = ? [pid 10555] +++ exited with 0 +++ [pid 10554] +++ exited with 0 +++ [pid 10553] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10553, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1183/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1183/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1183/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1183/bus") = 0 [pid 5052] umount2("./1183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1183/binderfs") = 0 [pid 5052] umount2("./1183/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1183/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 270.438814][T10554] loop0: detected capacity change from 0 to 512 [ 270.449316][T10554] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1183/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1183/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1183/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1183") = 0 [pid 5052] mkdir("./1184", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10556 attached , child_tidptr=0x555556d60690) = 10556 [pid 10556] set_robust_list(0x555556d606a0, 24) = 0 [pid 10556] chdir("./1184") = 0 [pid 10556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10556] setpgid(0, 0) = 0 [pid 10556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10556] write(3, "1000", 4) = 4 [pid 10556] close(3) = 0 [pid 10556] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10556] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10556] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10556] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10556] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10556] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10556] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10557 attached [pid 10557] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10556] <... clone3 resumed> => {parent_tid=[10557]}, 88) = 10557 [pid 10557] <... rseq resumed>) = 0 [pid 10557] set_robust_list(0x7f55300e29a0, 24 [pid 10556] rt_sigprocmask(SIG_SETMASK, [], [pid 10557] <... set_robust_list resumed>) = 0 [pid 10556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10557] rt_sigprocmask(SIG_SETMASK, [], [pid 10556] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10557] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10556] <... futex resumed>) = 0 [pid 10557] memfd_create("syzkaller", 0 [pid 10556] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10557] <... memfd_create resumed>) = 3 [pid 10556] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10556] <... mprotect resumed>) = 0 [pid 10556] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10556] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10558 attached [pid 10557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10558] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10556] <... clone3 resumed> => {parent_tid=[10558]}, 88) = 10558 [pid 10556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10556] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10556] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10558] <... rseq resumed>) = 0 [pid 10558] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10558] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10557] <... write resumed>) = 262144 [pid 10557] munmap(0x7f5527ca1000, 262144 [pid 10558] <... open resumed>) = 4 [pid 10558] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10558] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10557] <... munmap resumed>) = 0 [pid 10556] <... futex resumed>) = 0 [pid 10556] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10558] <... futex resumed>) = 0 [pid 10556] <... futex resumed>) = 1 [pid 10558] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10557] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10556] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10557] <... openat resumed>) = 5 [pid 10557] ioctl(5, LOOP_SET_FD, 3 [pid 10558] <... mount resumed>) = 0 [pid 10558] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10558] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10556] <... futex resumed>) = 0 [pid 10556] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10556] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10558] <... futex resumed>) = 0 [pid 10558] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10557] <... ioctl resumed>) = 0 [pid 10558] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10557] close(3) = 0 [pid 10557] mkdir("./file1", 0777 [pid 10558] <... futex resumed>) = 1 [pid 10556] <... futex resumed>) = 0 [pid 10557] <... mkdir resumed>) = 0 [pid 10558] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10556] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10557] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10556] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10557] ioctl(5, LOOP_CLR_FD) = 0 [pid 10557] close(5) = 0 [pid 10557] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10557] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10558] <... write resumed>) = 262144 [pid 10558] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10556] <... futex resumed>) = 0 [pid 10558] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10556] exit_group(0 [pid 10558] <... futex resumed>) = ? [pid 10556] <... exit_group resumed>) = ? [pid 10558] +++ exited with 0 +++ [pid 10557] <... futex resumed>) = ? [pid 10557] +++ exited with 0 +++ [pid 10556] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10556, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1184/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1184/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1184/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1184/bus") = 0 [pid 5052] umount2("./1184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1184/binderfs") = 0 [pid 5052] umount2("./1184/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1184/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1184/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1184/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 270.545823][T10557] loop0: detected capacity change from 0 to 512 [ 270.556284][T10557] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1184/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1184") = 0 [pid 5052] mkdir("./1185", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10559 attached , child_tidptr=0x555556d60690) = 10559 [pid 10559] set_robust_list(0x555556d606a0, 24) = 0 [pid 10559] chdir("./1185") = 0 [pid 10559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10559] setpgid(0, 0) = 0 [pid 10559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10559] write(3, "1000", 4) = 4 [pid 10559] close(3) = 0 [pid 10559] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10559] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10559] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10559] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10559] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10559] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10559] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10560 attached [pid 10560] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10560] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10559] <... clone3 resumed> => {parent_tid=[10560]}, 88) = 10560 [pid 10560] rt_sigprocmask(SIG_SETMASK, [], [pid 10559] rt_sigprocmask(SIG_SETMASK, [], [pid 10560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10559] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10560] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10559] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10560] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10559] <... futex resumed>) = 0 [pid 10559] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10560] memfd_create("syzkaller", 0 [pid 10559] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10560] <... memfd_create resumed>) = 3 [pid 10559] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10559] <... mprotect resumed>) = 0 [pid 10560] <... mmap resumed>) = 0x7f5527ca1000 [pid 10559] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10559] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10561 attached [pid 10561] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10561] <... rseq resumed>) = 0 [pid 10559] <... clone3 resumed> => {parent_tid=[10561]}, 88) = 10561 [pid 10561] set_robust_list(0x7f55300c19a0, 24 [pid 10559] rt_sigprocmask(SIG_SETMASK, [], [pid 10561] <... set_robust_list resumed>) = 0 [pid 10559] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10561] rt_sigprocmask(SIG_SETMASK, [], [pid 10559] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10559] <... futex resumed>) = 0 [pid 10561] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10559] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10561] <... open resumed>) = 4 [pid 10561] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10559] <... futex resumed>) = 0 [pid 10559] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10559] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10561] <... futex resumed>) = 1 [pid 10561] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10561] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10560] <... write resumed>) = 262144 [pid 10559] <... futex resumed>) = 0 [pid 10559] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10561] <... futex resumed>) = 1 [pid 10559] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10561] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10561] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10559] <... futex resumed>) = 0 [pid 10559] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10561] <... futex resumed>) = 1 [pid 10561] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10559] <... futex resumed>) = 0 [pid 10561] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10559] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10561] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10561] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10560] munmap(0x7f5527ca1000, 262144) = 0 [pid 10560] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10560] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10560] close(3) = 0 [pid 10560] mkdir("./file1", 0777) = 0 [pid 10560] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10560] ioctl(6, LOOP_CLR_FD) = 0 [pid 10560] close(6) = 0 [pid 10560] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10560] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10559] exit_group(0) = ? [pid 10561] <... futex resumed>) = ? [pid 10561] +++ exited with 0 +++ [pid 10560] <... futex resumed>) = ? [pid 10560] +++ exited with 0 +++ [pid 10559] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10559, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1185/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1185/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1185/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1185/bus") = 0 [pid 5052] umount2("./1185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1185/binderfs") = 0 [pid 5052] umount2("./1185/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1185/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1185/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1185/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1185/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 270.667613][T10560] loop0: detected capacity change from 0 to 512 [ 270.680272][T10560] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1185") = 0 [pid 5052] mkdir("./1186", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10562 attached , child_tidptr=0x555556d60690) = 10562 [pid 10562] set_robust_list(0x555556d606a0, 24) = 0 [pid 10562] chdir("./1186") = 0 [pid 10562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10562] setpgid(0, 0) = 0 [pid 10562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10562] write(3, "1000", 4) = 4 [pid 10562] close(3) = 0 [pid 10562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10562] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10562] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10562] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10562] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10563 attached => {parent_tid=[10563]}, 88) = 10563 [pid 10562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10562] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10563] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10562] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10563] <... rseq resumed>) = 0 [pid 10563] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10562] <... futex resumed>) = 0 [pid 10563] rt_sigprocmask(SIG_SETMASK, [], [pid 10562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10563] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10562] <... mmap resumed>) = 0x7f55300a1000 [pid 10562] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10563] memfd_create("syzkaller", 0) = 3 [pid 10562] <... mprotect resumed>) = 0 [pid 10563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10564]}, 88) = 10564 [pid 10562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10562] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10562] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10564 attached [pid 10564] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10563] <... write resumed>) = 262144 [pid 10564] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10564] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10563] munmap(0x7f5527ca1000, 262144 [pid 10564] <... open resumed>) = 4 [pid 10564] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10564] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10562] <... futex resumed>) = 0 [pid 10563] <... munmap resumed>) = 0 [pid 10562] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10563] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10564] <... futex resumed>) = 0 [pid 10563] ioctl(5, LOOP_SET_FD, 3 [pid 10562] <... futex resumed>) = 1 [pid 10564] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10562] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10564] <... mount resumed>) = 0 [pid 10563] <... ioctl resumed>) = 0 [pid 10564] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10563] close(3 [pid 10562] <... futex resumed>) = 0 [pid 10564] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10563] <... close resumed>) = 0 [pid 10562] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10563] mkdir("./file1", 0777 [pid 10564] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10563] <... mkdir resumed>) = 0 [pid 10562] <... futex resumed>) = 0 [pid 10564] <... open resumed>) = 3 [pid 10562] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10564] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10562] <... futex resumed>) = 0 [pid 10562] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10564] <... futex resumed>) = 1 [pid 10564] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10562] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10563] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10563] ioctl(5, LOOP_CLR_FD) = 0 [pid 10563] close(5) = 0 [pid 10563] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10563] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10564] <... write resumed>) = 262144 [pid 10564] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10562] <... futex resumed>) = 0 [pid 10562] exit_group(0 [pid 10564] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 10563] <... futex resumed>) = ? [pid 10562] <... exit_group resumed>) = ? [pid 10563] +++ exited with 0 +++ [pid 10564] +++ exited with 0 +++ [pid 10562] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10562, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1186/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1186/bus") = 0 [pid 5052] umount2("./1186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1186/binderfs") = 0 [pid 5052] umount2("./1186/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1186/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1186/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1186/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 270.769935][T10563] loop0: detected capacity change from 0 to 512 [ 270.783391][T10563] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1186/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1186") = 0 [pid 5052] mkdir("./1187", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10565 attached , child_tidptr=0x555556d60690) = 10565 [pid 10565] set_robust_list(0x555556d606a0, 24) = 0 [pid 10565] chdir("./1187") = 0 [pid 10565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10565] setpgid(0, 0) = 0 [pid 10565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10565] write(3, "1000", 4) = 4 [pid 10565] close(3) = 0 [pid 10565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10565] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10565] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10565] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10565] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10566]}, 88) = 10566 [pid 10565] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10566 attached NULL, 8) = 0 [pid 10566] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10565] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10566] <... rseq resumed>) = 0 [pid 10566] set_robust_list(0x7f55300e29a0, 24 [pid 10565] <... futex resumed>) = 0 [pid 10566] <... set_robust_list resumed>) = 0 [pid 10566] rt_sigprocmask(SIG_SETMASK, [], [pid 10565] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10565] <... futex resumed>) = 0 [pid 10565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10566] memfd_create("syzkaller", 0 [pid 10565] <... mmap resumed>) = 0x7f55300a1000 [pid 10566] <... memfd_create resumed>) = 3 [pid 10566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10565] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10565] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10566] <... mmap resumed>) = 0x7f5527ca1000 [pid 10565] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10567 attached [pid 10567] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10565] <... clone3 resumed> => {parent_tid=[10567]}, 88) = 10567 [pid 10567] <... rseq resumed>) = 0 [pid 10565] rt_sigprocmask(SIG_SETMASK, [], [pid 10567] set_robust_list(0x7f55300c19a0, 24 [pid 10565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10567] <... set_robust_list resumed>) = 0 [pid 10565] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10567] rt_sigprocmask(SIG_SETMASK, [], [pid 10565] <... futex resumed>) = 0 [pid 10567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10565] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10567] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10567] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10565] <... futex resumed>) = 0 [pid 10567] <... futex resumed>) = 1 [pid 10565] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10567] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10565] <... futex resumed>) = 0 [pid 10565] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10567] <... mount resumed>) = 0 [pid 10567] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10565] <... futex resumed>) = 0 [pid 10567] <... futex resumed>) = 1 [pid 10565] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10567] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10565] <... futex resumed>) = 0 [pid 10567] <... open resumed>) = 5 [pid 10565] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10567] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10565] <... futex resumed>) = 0 [pid 10565] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10567] <... futex resumed>) = 1 [pid 10567] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10565] <... futex resumed>) = 0 [pid 10567] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10565] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10567] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10567] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10566] <... write resumed>) = 262144 [pid 10566] munmap(0x7f5527ca1000, 262144) = 0 [pid 10566] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10566] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10566] close(3) = 0 [pid 10566] mkdir("./file1", 0777) = 0 [pid 10566] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10566] ioctl(6, LOOP_CLR_FD) = 0 [pid 10566] close(6) = 0 [pid 10566] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10566] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10565] exit_group(0) = ? [pid 10567] <... futex resumed>) = ? [pid 10566] <... futex resumed>) = ? [pid 10567] +++ exited with 0 +++ [pid 10566] +++ exited with 0 +++ [pid 10565] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10565, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1187/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1187/bus") = 0 [pid 5052] umount2("./1187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1187/binderfs") = 0 [pid 5052] umount2("./1187/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1187/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1187/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1187/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1187/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1187") = 0 [pid 5052] mkdir("./1188", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10568 attached , child_tidptr=0x555556d60690) = 10568 [pid 10568] set_robust_list(0x555556d606a0, 24) = 0 [pid 10568] chdir("./1188") = 0 [pid 10568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10568] setpgid(0, 0) = 0 [ 270.894657][T10566] loop0: detected capacity change from 0 to 512 [ 270.903474][T10566] ext4: Unknown parameter 'nouser_xattr' [pid 10568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10568] write(3, "1000", 4) = 4 [pid 10568] close(3) = 0 [pid 10568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10568] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10568] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10568] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10568] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10568] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10568] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10569 attached [pid 10569] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10568] <... clone3 resumed> => {parent_tid=[10569]}, 88) = 10569 [pid 10568] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10569] set_robust_list(0x7f55300e29a0, 24 [pid 10568] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10569] <... set_robust_list resumed>) = 0 [pid 10568] <... futex resumed>) = 0 [pid 10569] rt_sigprocmask(SIG_SETMASK, [], [pid 10568] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10569] memfd_create("syzkaller", 0 [pid 10568] <... futex resumed>) = 0 [pid 10568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10568] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10569] <... memfd_create resumed>) = 3 [pid 10568] <... mprotect resumed>) = 0 [pid 10568] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10568] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10569] <... mmap resumed>) = 0x7f5527ca1000 [pid 10568] <... clone3 resumed> => {parent_tid=[10570]}, 88) = 10570 [pid 10568] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10568] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10568] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10570 attached [pid 10570] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10570] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10570] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10570] <... open resumed>) = 4 [pid 10570] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10568] <... futex resumed>) = 0 [pid 10568] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10568] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10570] <... futex resumed>) = 1 [pid 10570] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10570] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10568] <... futex resumed>) = 0 [pid 10568] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10568] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10570] <... futex resumed>) = 1 [pid 10570] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10570] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10568] <... futex resumed>) = 0 [pid 10568] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10570] <... futex resumed>) = 1 [pid 10568] <... futex resumed>) = 0 [pid 10570] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10568] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10570] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10570] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10568] <... futex resumed>) = 0 [pid 10570] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10569] <... write resumed>) = 262144 [pid 10569] munmap(0x7f5527ca1000, 262144) = 0 [pid 10569] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10569] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10569] close(3) = 0 [pid 10569] mkdir("./file1", 0777) = 0 [pid 10569] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10569] ioctl(6, LOOP_CLR_FD) = 0 [pid 10569] close(6) = 0 [pid 10569] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10569] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10568] exit_group(0 [pid 10569] <... futex resumed>) = ? [pid 10569] +++ exited with 0 +++ [pid 10570] <... futex resumed>) = ? [pid 10570] +++ exited with 0 +++ [pid 10568] <... exit_group resumed>) = ? [pid 10568] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10568, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1188/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1188/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1188/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1188/bus") = 0 [pid 5052] umount2("./1188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1188/binderfs") = 0 [pid 5052] umount2("./1188/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1188/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1188/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1188/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1188/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1188") = 0 [pid 5052] mkdir("./1189", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = 0 [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10571 ./strace-static-x86_64: Process 10571 attached [pid 10571] set_robust_list(0x555556d606a0, 24) = 0 [pid 10571] chdir("./1189") = 0 [pid 10571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10571] setpgid(0, 0) = 0 [pid 10571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10571] write(3, "1000", 4) = 4 [pid 10571] close(3) = 0 [pid 10571] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10571] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10571] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10571] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10571] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10571] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10571] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10572 attached [pid 10572] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10571] <... clone3 resumed> => {parent_tid=[10572]}, 88) = 10572 [pid 10572] set_robust_list(0x7f55300e29a0, 24 [pid 10571] rt_sigprocmask(SIG_SETMASK, [], [pid 10572] <... set_robust_list resumed>) = 0 [pid 10572] rt_sigprocmask(SIG_SETMASK, [], [pid 10571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10572] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10571] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10572] memfd_create("syzkaller", 0 [pid 10571] <... futex resumed>) = 0 [pid 10571] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10572] <... memfd_create resumed>) = 3 [pid 10571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10571] <... mmap resumed>) = 0x7f55300a1000 [pid 10572] <... mmap resumed>) = 0x7f5527ca1000 [pid 10572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10571] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10571] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 270.997078][T10569] loop0: detected capacity change from 0 to 512 [ 271.006973][T10569] ext4: Unknown parameter 'nouser_xattr' [pid 10571] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10572] <... write resumed>) = 262144 [pid 10572] munmap(0x7f5527ca1000, 262144 [pid 10571] <... clone3 resumed> => {parent_tid=[10573]}, 88) = 10573 ./strace-static-x86_64: Process 10573 attached [pid 10572] <... munmap resumed>) = 0 [pid 10571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10571] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10573] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10571] <... futex resumed>) = 0 [pid 10573] <... rseq resumed>) = 0 [pid 10572] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10573] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10571] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10573] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10572] <... openat resumed>) = 4 [pid 10573] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10572] ioctl(4, LOOP_SET_FD, 3 [pid 10573] <... open resumed>) = 5 [pid 10572] <... ioctl resumed>) = 0 [pid 10573] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10572] close(3 [pid 10573] <... futex resumed>) = 1 [pid 10573] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10571] <... futex resumed>) = 0 [pid 10571] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10573] <... futex resumed>) = 0 [pid 10571] <... futex resumed>) = 1 [pid 10573] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10571] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10573] <... mount resumed>) = 0 [pid 10573] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10571] <... futex resumed>) = 0 [pid 10573] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10571] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10573] <... futex resumed>) = 0 [pid 10571] <... futex resumed>) = 1 [pid 10573] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10571] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10573] <... open resumed>) = 6 [pid 10573] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10571] <... futex resumed>) = 0 [pid 10573] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10571] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10572] <... close resumed>) = 0 [pid 10571] <... futex resumed>) = 0 [pid 10573] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10571] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10572] mkdir("./file1", 0777) = 0 [pid 10572] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10572] ioctl(4, LOOP_CLR_FD) = 0 [pid 10572] close(4) = 0 [pid 10572] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10572] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10573] <... write resumed>) = 262144 [pid 10573] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10571] <... futex resumed>) = 0 [pid 10573] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10571] exit_group(0) = ? [pid 10572] <... futex resumed>) = ? [pid 10572] +++ exited with 0 +++ [pid 10573] <... futex resumed>) = ? [pid 10573] +++ exited with 0 +++ [pid 10571] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10571, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1189/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1189/bus") = 0 [pid 5052] umount2("./1189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1189/binderfs") = 0 [pid 5052] umount2("./1189/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1189/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1189/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1189/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1189/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1189") = 0 [ 271.066634][T10572] loop0: detected capacity change from 0 to 512 [ 271.087075][T10572] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1190", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10574 attached [pid 10574] set_robust_list(0x555556d606a0, 24) = 0 [pid 10574] chdir("./1190" [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10574 [pid 10574] <... chdir resumed>) = 0 [pid 10574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10574] setpgid(0, 0) = 0 [pid 10574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10574] write(3, "1000", 4) = 4 [pid 10574] close(3) = 0 [pid 10574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10574] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10574] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10574] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10574] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10575 attached => {parent_tid=[10575]}, 88) = 10575 [pid 10574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10575] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10574] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10575] <... rseq resumed>) = 0 [pid 10575] set_robust_list(0x7f55300e29a0, 24 [pid 10574] <... futex resumed>) = 0 [pid 10575] <... set_robust_list resumed>) = 0 [pid 10575] rt_sigprocmask(SIG_SETMASK, [], [pid 10574] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10574] <... futex resumed>) = 0 [pid 10575] memfd_create("syzkaller", 0 [pid 10574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10575] <... memfd_create resumed>) = 3 [pid 10575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10574] <... mmap resumed>) = 0x7f55300a1000 [pid 10575] <... mmap resumed>) = 0x7f5527ca1000 [pid 10574] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10576 attached => {parent_tid=[10576]}, 88) = 10576 [pid 10576] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10574] rt_sigprocmask(SIG_SETMASK, [], [pid 10576] <... rseq resumed>) = 0 [pid 10574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10576] set_robust_list(0x7f55300c19a0, 24 [pid 10574] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10576] <... set_robust_list resumed>) = 0 [pid 10574] <... futex resumed>) = 0 [pid 10576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10574] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10576] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10576] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10574] <... futex resumed>) = 0 [pid 10576] <... futex resumed>) = 1 [pid 10576] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10574] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10576] <... mount resumed>) = 0 [pid 10575] <... write resumed>) = 262144 [pid 10574] <... futex resumed>) = 0 [pid 10574] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10576] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10574] <... futex resumed>) = 0 [pid 10574] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10576] <... futex resumed>) = 1 [pid 10576] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10574] <... futex resumed>) = 0 [pid 10576] <... open resumed>) = 5 [pid 10574] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10576] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10574] <... futex resumed>) = 0 [pid 10576] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10574] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10575] munmap(0x7f5527ca1000, 262144 [pid 10576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10574] <... futex resumed>) = 0 [pid 10576] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10574] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10576] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10576] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10574] <... futex resumed>) = 0 [pid 10576] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10575] <... munmap resumed>) = 0 [pid 10575] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10575] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10575] close(3) = 0 [pid 10575] mkdir("./file1", 0777) = 0 [pid 10575] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10575] ioctl(6, LOOP_CLR_FD) = 0 [pid 10575] close(6) = 0 [pid 10575] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10575] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10574] exit_group(0 [pid 10576] <... futex resumed>) = ? [pid 10575] <... futex resumed>) = ? [pid 10574] <... exit_group resumed>) = ? [pid 10576] +++ exited with 0 +++ [pid 10575] +++ exited with 0 +++ [pid 10574] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10574, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1190/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1190/bus") = 0 [pid 5052] umount2("./1190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1190/binderfs") = 0 [pid 5052] umount2("./1190/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1190/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1190/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1190/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1190/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1190") = 0 [pid 5052] mkdir("./1191", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10577 attached , child_tidptr=0x555556d60690) = 10577 [ 271.198748][T10575] loop0: detected capacity change from 0 to 512 [ 271.208440][T10575] ext4: Unknown parameter 'nouser_xattr' [pid 10577] set_robust_list(0x555556d606a0, 24) = 0 [pid 10577] chdir("./1191") = 0 [pid 10577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10577] setpgid(0, 0) = 0 [pid 10577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10577] write(3, "1000", 4) = 4 [pid 10577] close(3) = 0 [pid 10577] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10577] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10577] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10577] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10577] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10577] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10578]}, 88) = 10578 [pid 10577] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10578 attached NULL, 8) = 0 [pid 10577] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10577] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10578] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10577] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10577] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10579]}, 88) = 10579 ./strace-static-x86_64: Process 10579 attached [pid 10577] rt_sigprocmask(SIG_SETMASK, [], [pid 10579] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10579] set_robust_list(0x7f55300c19a0, 24 [pid 10577] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10579] <... set_robust_list resumed>) = 0 [pid 10579] rt_sigprocmask(SIG_SETMASK, [], [pid 10577] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10579] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10577] <... futex resumed>) = 0 [pid 10579] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10577] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10579] <... open resumed>) = 3 [pid 10579] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10577] <... futex resumed>) = 0 [pid 10577] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10579] <... futex resumed>) = 1 [pid 10577] <... futex resumed>) = 0 [pid 10579] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10577] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10579] <... mount resumed>) = 0 [pid 10579] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10577] <... futex resumed>) = 0 [pid 10579] <... futex resumed>) = 1 [pid 10579] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10577] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10579] <... open resumed>) = 4 [pid 10577] <... futex resumed>) = 0 [pid 10577] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10579] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10577] <... futex resumed>) = 0 [pid 10579] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10577] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10579] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10577] <... futex resumed>) = 0 [pid 10579] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10577] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10579] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10578] <... rseq resumed>) = 0 [pid 10579] <... futex resumed>) = 0 [pid 10579] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10578] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10578] memfd_create("syzkaller", 0) = 5 [pid 10578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10578] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10578] munmap(0x7f5527ca1000, 262144) = 0 [pid 10578] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10578] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 10578] close(5) = 0 [pid 10578] mkdir("./file1", 0777) = 0 [pid 10578] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10578] ioctl(6, LOOP_CLR_FD) = 0 [pid 10578] close(6) = 0 [pid 10578] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10577] exit_group(0) = ? [pid 10579] <... futex resumed>) = ? [pid 10579] +++ exited with 0 +++ [pid 10578] <... futex resumed>) = ? [pid 10578] +++ exited with 0 +++ [pid 10577] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10577, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1191/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1191/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1191/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1191/bus") = 0 [pid 5052] umount2("./1191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1191/binderfs") = 0 [pid 5052] umount2("./1191/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1191/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1191/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1191/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [ 271.320797][T10578] loop0: detected capacity change from 0 to 512 [ 271.332946][T10578] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(4) = 0 [pid 5052] rmdir("./1191/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1191") = 0 [pid 5052] mkdir("./1192", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10580 ./strace-static-x86_64: Process 10580 attached [pid 10580] set_robust_list(0x555556d606a0, 24) = 0 [pid 10580] chdir("./1192") = 0 [pid 10580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10580] setpgid(0, 0) = 0 [pid 10580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10580] write(3, "1000", 4) = 4 [pid 10580] close(3) = 0 [pid 10580] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10580] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10580] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10580] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10580] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10580] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10581]}, 88) = 10581 [pid 10580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10580] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10580] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10580] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10580] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10582]}, 88) = 10582 [pid 10580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10580] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10582 attached [pid 10580] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10582] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10582] set_robust_list(0x7f55300c19a0, 24./strace-static-x86_64: Process 10581 attached ) = 0 [pid 10582] rt_sigprocmask(SIG_SETMASK, [], [pid 10581] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10581] <... rseq resumed>) = 0 [pid 10582] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10581] set_robust_list(0x7f55300e29a0, 24 [pid 10582] <... open resumed>) = 3 [pid 10581] <... set_robust_list resumed>) = 0 [pid 10581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10582] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10580] <... futex resumed>) = 0 [pid 10580] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10580] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10582] <... futex resumed>) = 1 [pid 10582] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10581] memfd_create("syzkaller", 0 [pid 10582] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10580] <... futex resumed>) = 0 [pid 10580] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10580] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10582] <... futex resumed>) = 1 [pid 10581] <... memfd_create resumed>) = 4 [pid 10581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10582] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10581] <... mmap resumed>) = 0x7f5527ca1000 [pid 10582] <... open resumed>) = 5 [pid 10582] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10581] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10582] <... futex resumed>) = 1 [pid 10580] <... futex resumed>) = 0 [pid 10582] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10580] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10582] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10580] <... futex resumed>) = 0 [pid 10582] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10580] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10582] <... futex resumed>) = 0 [pid 10582] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10581] <... write resumed>) = 262144 [pid 10581] munmap(0x7f5527ca1000, 262144) = 0 [pid 10581] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10581] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10581] close(4) = 0 [pid 10581] mkdir("./file1", 0777) = 0 [pid 10581] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10581] ioctl(6, LOOP_CLR_FD) = 0 [pid 10581] close(6) = 0 [pid 10581] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10581] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10580] exit_group(0 [pid 10581] <... futex resumed>) = ? [pid 10580] <... exit_group resumed>) = ? [pid 10581] +++ exited with 0 +++ [pid 10582] <... futex resumed>) = ? [pid 10582] +++ exited with 0 +++ [pid 10580] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10580, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1192/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1192/bus") = 0 [pid 5052] umount2("./1192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1192/binderfs") = 0 [pid 5052] umount2("./1192/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1192/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1192/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 271.480777][T10581] loop0: detected capacity change from 0 to 512 [ 271.494398][T10581] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "./1192/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1192/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1192") = 0 [pid 5052] mkdir("./1193", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10583 attached [pid 10583] set_robust_list(0x555556d606a0, 24) = 0 [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10583 [pid 10583] chdir("./1193") = 0 [pid 10583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10583] setpgid(0, 0) = 0 [pid 10583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10583] write(3, "1000", 4) = 4 [pid 10583] close(3) = 0 [pid 10583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10583] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10583] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10583] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10583] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10584]}, 88) = 10584 [pid 10583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10583] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10583] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10583] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10585 attached [pid 10585] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10583] <... clone3 resumed> => {parent_tid=[10585]}, 88) = 10585 ./strace-static-x86_64: Process 10584 attached [pid 10585] <... rseq resumed>) = 0 [pid 10583] rt_sigprocmask(SIG_SETMASK, [], [pid 10585] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10583] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10585] rt_sigprocmask(SIG_SETMASK, [], [pid 10583] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10585] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10583] <... futex resumed>) = 0 [pid 10585] <... open resumed>) = 3 [pid 10583] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10585] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10583] <... futex resumed>) = 0 [pid 10583] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10585] <... futex resumed>) = 1 [pid 10585] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10583] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10585] <... mount resumed>) = 0 [pid 10585] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10584] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10583] <... futex resumed>) = 0 [pid 10585] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10584] <... rseq resumed>) = 0 [pid 10583] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10584] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10584] memfd_create("syzkaller", 0) = 4 [pid 10584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10585] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10584] <... mmap resumed>) = 0x7f5527ca1000 [pid 10585] <... open resumed>) = 5 [pid 10583] <... futex resumed>) = 0 [pid 10583] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10585] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10583] <... futex resumed>) = 0 [pid 10583] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10583] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10584] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10585] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10585] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10583] <... futex resumed>) = 0 [pid 10585] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10584] <... write resumed>) = 262144 [pid 10584] munmap(0x7f5527ca1000, 262144) = 0 [pid 10584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10584] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10584] close(4) = 0 [pid 10584] mkdir("./file1", 0777) = 0 [pid 10584] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10584] ioctl(6, LOOP_CLR_FD) = 0 [pid 10584] close(6) = 0 [pid 10584] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10584] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10583] exit_group(0 [pid 10585] <... futex resumed>) = ? [pid 10583] <... exit_group resumed>) = ? [pid 10585] +++ exited with 0 +++ [pid 10584] <... futex resumed>) = ? [pid 10584] +++ exited with 0 +++ [pid 10583] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10583, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [ 271.635454][T10584] loop0: detected capacity change from 0 to 512 [ 271.652108][T10584] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1193/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1193/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1193/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1193/bus") = 0 [pid 5052] umount2("./1193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1193/binderfs") = 0 [pid 5052] umount2("./1193/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1193/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1193/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1193/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1193/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1193") = 0 [pid 5052] mkdir("./1194", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10586 ./strace-static-x86_64: Process 10586 attached [pid 10586] set_robust_list(0x555556d606a0, 24) = 0 [pid 10586] chdir("./1194") = 0 [pid 10586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10586] setpgid(0, 0) = 0 [pid 10586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10586] write(3, "1000", 4) = 4 [pid 10586] close(3) = 0 [pid 10586] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10586] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10586] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10586] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10586] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10586] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10587 attached => {parent_tid=[10587]}, 88) = 10587 [pid 10587] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10586] rt_sigprocmask(SIG_SETMASK, [], [pid 10587] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10587] rt_sigprocmask(SIG_SETMASK, [], [pid 10586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10586] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10586] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10586] <... futex resumed>) = 0 [pid 10587] memfd_create("syzkaller", 0 [pid 10586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10587] <... memfd_create resumed>) = 3 [pid 10586] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10586] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10587] <... mmap resumed>) = 0x7f5527ca1000 [pid 10586] <... clone3 resumed> => {parent_tid=[10588]}, 88) = 10588 [pid 10586] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10588 attached NULL, 8) = 0 [pid 10588] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10586] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10588] <... rseq resumed>) = 0 [pid 10586] <... futex resumed>) = 0 [pid 10588] set_robust_list(0x7f55300c19a0, 24 [pid 10586] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10588] <... set_robust_list resumed>) = 0 [pid 10588] rt_sigprocmask(SIG_SETMASK, [], [pid 10587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10588] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10588] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10588] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10586] <... futex resumed>) = 0 [pid 10586] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10586] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10588] <... futex resumed>) = 1 [pid 10588] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10588] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10586] <... futex resumed>) = 0 [pid 10586] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10586] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10588] <... futex resumed>) = 1 [pid 10588] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10588] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10586] <... futex resumed>) = 0 [pid 10586] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10586] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10588] <... futex resumed>) = 1 [pid 10588] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10588] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10586] <... futex resumed>) = 0 [pid 10588] <... futex resumed>) = 1 [pid 10588] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10587] <... write resumed>) = 262144 [pid 10587] munmap(0x7f5527ca1000, 262144) = 0 [pid 10587] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10587] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10587] close(3) = 0 [pid 10587] mkdir("./file1", 0777) = 0 [pid 10587] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10587] ioctl(6, LOOP_CLR_FD) = 0 [pid 10587] close(6) = 0 [pid 10587] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10587] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10586] exit_group(0 [pid 10588] <... futex resumed>) = ? [pid 10587] <... futex resumed>) = ? [pid 10586] <... exit_group resumed>) = ? [pid 10588] +++ exited with 0 +++ [pid 10587] +++ exited with 0 +++ [pid 10586] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10586, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1194/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1194/bus") = 0 [pid 5052] umount2("./1194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1194/binderfs") = 0 [pid 5052] umount2("./1194/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1194/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1194/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1194/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1194/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 271.800298][T10587] loop0: detected capacity change from 0 to 512 [ 271.812819][T10587] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1194") = 0 [pid 5052] mkdir("./1195", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10589 ./strace-static-x86_64: Process 10589 attached [pid 10589] set_robust_list(0x555556d606a0, 24) = 0 [pid 10589] chdir("./1195") = 0 [pid 10589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10589] setpgid(0, 0) = 0 [pid 10589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10589] write(3, "1000", 4) = 4 [pid 10589] close(3) = 0 [pid 10589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10589] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10589] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10589] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10589] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10589] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10590 attached => {parent_tid=[10590]}, 88) = 10590 [pid 10589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10589] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10590] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10589] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10590] <... rseq resumed>) = 0 [pid 10589] <... futex resumed>) = 0 [pid 10590] set_robust_list(0x7f55300e29a0, 24 [pid 10589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10590] <... set_robust_list resumed>) = 0 [pid 10589] <... mmap resumed>) = 0x7f55300a1000 [pid 10590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10590] memfd_create("syzkaller", 0 [pid 10589] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10589] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10590] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 10591 attached [pid 10589] <... clone3 resumed> => {parent_tid=[10591]}, 88) = 10591 [pid 10591] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10589] rt_sigprocmask(SIG_SETMASK, [], [pid 10591] <... rseq resumed>) = 0 [pid 10589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10591] set_robust_list(0x7f55300c19a0, 24 [pid 10589] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10591] <... set_robust_list resumed>) = 0 [pid 10589] <... futex resumed>) = 0 [pid 10591] rt_sigprocmask(SIG_SETMASK, [], [pid 10590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10589] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10591] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10590] <... mmap resumed>) = 0x7f5527ca1000 [pid 10591] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10591] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10591] <... futex resumed>) = 1 [pid 10589] <... futex resumed>) = 0 [pid 10591] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10589] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10590] <... write resumed>) = 262144 [pid 10591] <... mount resumed>) = 0 [pid 10590] munmap(0x7f5527ca1000, 262144 [pid 10589] <... futex resumed>) = 0 [pid 10591] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10589] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10591] <... futex resumed>) = 0 [pid 10590] <... munmap resumed>) = 0 [pid 10589] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10591] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10589] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10589] <... futex resumed>) = 0 [pid 10591] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10589] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10591] <... open resumed>) = 5 [pid 10590] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10590] ioctl(6, LOOP_SET_FD, 3 [pid 10591] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10589] <... futex resumed>) = 0 [pid 10591] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10589] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10589] <... futex resumed>) = 0 [pid 10591] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10589] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10590] <... ioctl resumed>) = 0 [pid 10590] close(3) = 0 [pid 10590] mkdir("./file1", 0777) = 0 [pid 10590] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10590] ioctl(6, LOOP_CLR_FD) = 0 [pid 10590] close(6) = 0 [pid 10590] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10590] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10591] <... write resumed>) = 262144 [pid 10591] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10589] <... futex resumed>) = 0 [pid 10591] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10589] exit_group(0) = ? [pid 10591] <... futex resumed>) = ? [pid 10591] +++ exited with 0 +++ [pid 10590] <... futex resumed>) = ? [ 271.952328][T10590] loop0: detected capacity change from 0 to 512 [ 271.970697][T10590] ext4: Unknown parameter 'nouser_xattr' [pid 10590] +++ exited with 0 +++ [pid 10589] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10589, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1195/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1195/bus") = 0 [pid 5052] umount2("./1195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1195/binderfs") = 0 [pid 5052] umount2("./1195/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1195/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1195/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1195/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1195/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1195") = 0 [pid 5052] mkdir("./1196", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10592 ./strace-static-x86_64: Process 10592 attached [pid 10592] set_robust_list(0x555556d606a0, 24) = 0 [pid 10592] chdir("./1196") = 0 [pid 10592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10592] setpgid(0, 0) = 0 [pid 10592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10592] write(3, "1000", 4) = 4 [pid 10592] close(3) = 0 [pid 10592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10592] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10592] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10592] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10592] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10593 attached => {parent_tid=[10593]}, 88) = 10593 [pid 10593] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10592] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10592] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10592] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10593] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10594]}, 88) = 10594 [pid 10592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10592] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10592] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10594 attached [pid 10593] rt_sigprocmask(SIG_SETMASK, [], [pid 10594] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10593] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10594] <... rseq resumed>) = 0 [pid 10594] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10594] rt_sigprocmask(SIG_SETMASK, [], [pid 10593] memfd_create("syzkaller", 0 [pid 10594] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10594] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10593] <... memfd_create resumed>) = 4 [pid 10593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10594] <... open resumed>) = 3 [pid 10593] <... mmap resumed>) = 0x7f5527ca1000 [pid 10594] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10592] <... futex resumed>) = 0 [pid 10594] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10592] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10594] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10592] <... futex resumed>) = 0 [pid 10593] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10594] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10592] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10594] <... mount resumed>) = 0 [pid 10594] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10592] <... futex resumed>) = 0 [pid 10592] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10594] <... futex resumed>) = 1 [pid 10592] <... futex resumed>) = 0 [pid 10594] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10592] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10594] <... open resumed>) = 5 [pid 10594] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10592] <... futex resumed>) = 0 [pid 10594] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10593] <... write resumed>) = 262144 [pid 10592] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10594] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10594] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10592] <... futex resumed>) = 0 [pid 10594] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10592] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10594] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10592] <... futex resumed>) = 0 [pid 10594] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10593] munmap(0x7f5527ca1000, 262144) = 0 [pid 10593] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10593] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10593] close(4) = 0 [pid 10593] mkdir("./file1", 0777) = 0 [pid 10593] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10593] ioctl(6, LOOP_CLR_FD) = 0 [pid 10593] close(6) = 0 [pid 10593] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10593] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10592] exit_group(0 [pid 10594] <... futex resumed>) = ? [pid 10593] <... futex resumed>) = ? [pid 10592] <... exit_group resumed>) = ? [pid 10594] +++ exited with 0 +++ [pid 10593] +++ exited with 0 +++ [pid 10592] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10592, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1196/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1196/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1196/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1196/bus") = 0 [pid 5052] umount2("./1196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1196/binderfs") = 0 [pid 5052] umount2("./1196/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1196/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1196/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1196/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1196/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1196") = 0 [pid 5052] mkdir("./1197", 0777) = 0 [ 272.103287][T10593] loop0: detected capacity change from 0 to 512 [ 272.113334][T10593] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10595 attached , child_tidptr=0x555556d60690) = 10595 [pid 10595] set_robust_list(0x555556d606a0, 24) = 0 [pid 10595] chdir("./1197") = 0 [pid 10595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10595] setpgid(0, 0) = 0 [pid 10595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10595] write(3, "1000", 4) = 4 [pid 10595] close(3) = 0 [pid 10595] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10595] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10595] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10595] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10595] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10595] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10596]}, 88) = 10596 [pid 10595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10595] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10595] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10595] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 10596 attached [pid 10596] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10596] set_robust_list(0x7f55300e29a0, 24 [pid 10595] <... mprotect resumed>) = 0 [pid 10596] <... set_robust_list resumed>) = 0 [pid 10596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10595] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10596] memfd_create("syzkaller", 0 [pid 10595] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10596] <... memfd_create resumed>) = 3 [pid 10595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 10597 attached [pid 10597] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10595] <... clone3 resumed> => {parent_tid=[10597]}, 88) = 10597 [pid 10597] set_robust_list(0x7f55300c19a0, 24 [pid 10596] <... mmap resumed>) = 0x7f5527ca1000 [pid 10597] <... set_robust_list resumed>) = 0 [pid 10597] rt_sigprocmask(SIG_SETMASK, [], [pid 10595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10595] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10597] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10595] <... futex resumed>) = 0 [pid 10595] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10597] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10595] <... futex resumed>) = 0 [pid 10597] <... futex resumed>) = 1 [pid 10595] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10597] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10595] <... futex resumed>) = 0 [pid 10597] <... mount resumed>) = 0 [pid 10595] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10597] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10595] <... futex resumed>) = 0 [pid 10595] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10597] <... futex resumed>) = 1 [pid 10595] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10597] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10597] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10597] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10595] <... futex resumed>) = 0 [pid 10596] <... write resumed>) = 262144 [pid 10595] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10596] munmap(0x7f5527ca1000, 262144 [pid 10595] <... futex resumed>) = 1 [pid 10597] <... futex resumed>) = 0 [pid 10597] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10595] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10597] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10597] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10596] <... munmap resumed>) = 0 [pid 10595] <... futex resumed>) = 0 [pid 10597] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10596] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10596] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10596] close(3) = 0 [pid 10596] mkdir("./file1", 0777) = 0 [pid 10596] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10596] ioctl(6, LOOP_CLR_FD) = 0 [pid 10596] close(6) = 0 [pid 10596] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10596] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10595] exit_group(0 [pid 10597] <... futex resumed>) = ? [pid 10596] <... futex resumed>) = ? [pid 10595] <... exit_group resumed>) = ? [pid 10596] +++ exited with 0 +++ [pid 10597] +++ exited with 0 +++ [pid 10595] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10595, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1197/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1197/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1197/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1197/bus") = 0 [pid 5052] umount2("./1197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1197/binderfs") = 0 [pid 5052] umount2("./1197/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1197/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1197/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1197/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1197/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 272.223626][T10596] loop0: detected capacity change from 0 to 512 [ 272.232765][T10596] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1197") = 0 [pid 5052] mkdir("./1198", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10598 ./strace-static-x86_64: Process 10598 attached [pid 10598] set_robust_list(0x555556d606a0, 24) = 0 [pid 10598] chdir("./1198") = 0 [pid 10598] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10598] setpgid(0, 0) = 0 [pid 10598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10598] write(3, "1000", 4) = 4 [pid 10598] close(3) = 0 [pid 10598] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10598] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10598] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10598] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10598] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10598] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10599 attached [pid 10599] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10598] <... clone3 resumed> => {parent_tid=[10599]}, 88) = 10599 [pid 10599] <... rseq resumed>) = 0 [pid 10598] rt_sigprocmask(SIG_SETMASK, [], [pid 10599] set_robust_list(0x7f55300e29a0, 24 [pid 10598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10599] <... set_robust_list resumed>) = 0 [pid 10598] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10598] <... futex resumed>) = 0 [pid 10599] memfd_create("syzkaller", 0 [pid 10598] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10599] <... memfd_create resumed>) = 3 [pid 10598] <... mmap resumed>) = 0x7f55300a1000 [pid 10599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10598] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10598] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10600 attached => {parent_tid=[10600]}, 88) = 10600 [pid 10600] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10598] rt_sigprocmask(SIG_SETMASK, [], [pid 10600] <... rseq resumed>) = 0 [pid 10598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10600] set_robust_list(0x7f55300c19a0, 24 [pid 10598] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10600] <... set_robust_list resumed>) = 0 [pid 10598] <... futex resumed>) = 0 [pid 10600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10598] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10600] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10600] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10598] <... futex resumed>) = 0 [pid 10600] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10598] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10598] <... futex resumed>) = 0 [pid 10600] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10598] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10600] <... mount resumed>) = 0 [pid 10600] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10598] <... futex resumed>) = 0 [pid 10598] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10598] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10600] <... futex resumed>) = 1 [pid 10600] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10600] <... open resumed>) = 5 [pid 10600] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10598] <... futex resumed>) = 0 [pid 10600] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10598] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10598] <... futex resumed>) = 0 [pid 10600] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10598] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10600] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10600] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10598] <... futex resumed>) = 0 [pid 10600] <... futex resumed>) = 1 [pid 10600] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10599] <... write resumed>) = 262144 [pid 10599] munmap(0x7f5527ca1000, 262144) = 0 [pid 10599] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10599] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10599] close(3) = 0 [pid 10599] mkdir("./file1", 0777) = 0 [pid 10599] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10599] ioctl(6, LOOP_CLR_FD) = 0 [pid 10599] close(6) = 0 [pid 10599] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10599] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10598] exit_group(0) = ? [pid 10600] <... futex resumed>) = ? [pid 10599] <... futex resumed>) = ? [pid 10599] +++ exited with 0 +++ [pid 10600] +++ exited with 0 +++ [pid 10598] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10598, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1198/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1198/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1198/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1198/bus") = 0 [pid 5052] umount2("./1198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1198/binderfs") = 0 [pid 5052] umount2("./1198/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1198/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1198/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1198/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [ 272.331611][T10599] loop0: detected capacity change from 0 to 512 [ 272.342231][T10599] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1198/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1198") = 0 [pid 5052] mkdir("./1199", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10601 attached , child_tidptr=0x555556d60690) = 10601 [pid 10601] set_robust_list(0x555556d606a0, 24) = 0 [pid 10601] chdir("./1199") = 0 [pid 10601] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10601] setpgid(0, 0) = 0 [pid 10601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10601] write(3, "1000", 4) = 4 [pid 10601] close(3) = 0 [pid 10601] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10601] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10601] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10601] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10601] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10601] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10601] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10602]}, 88) = 10602 [pid 10601] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10601] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10601] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10601] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10601] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10601] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10603 attached [pid 10603] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10601] <... clone3 resumed> => {parent_tid=[10603]}, 88) = 10603 [pid 10603] set_robust_list(0x7f55300c19a0, 24 [pid 10601] rt_sigprocmask(SIG_SETMASK, [], [pid 10603] <... set_robust_list resumed>) = 0 [pid 10601] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10603] rt_sigprocmask(SIG_SETMASK, [], [pid 10601] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10601] <... futex resumed>) = 0 [pid 10603] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10601] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10602 attached [pid 10602] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10603] <... open resumed>) = 3 [pid 10602] <... rseq resumed>) = 0 [pid 10602] set_robust_list(0x7f55300e29a0, 24 [pid 10603] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10602] <... set_robust_list resumed>) = 0 [pid 10603] <... futex resumed>) = 1 [pid 10601] <... futex resumed>) = 0 [pid 10603] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10602] rt_sigprocmask(SIG_SETMASK, [], [pid 10601] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10601] <... futex resumed>) = 0 [pid 10603] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10601] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10603] <... mount resumed>) = 0 [pid 10602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10603] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10602] memfd_create("syzkaller", 0) = 4 [pid 10602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10603] <... futex resumed>) = 1 [pid 10601] <... futex resumed>) = 0 [pid 10603] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10601] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10601] <... futex resumed>) = 0 [pid 10603] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10601] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10602] <... mmap resumed>) = 0x7f5527ca1000 [pid 10603] <... open resumed>) = 5 [pid 10603] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10603] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10601] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10601] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10603] <... futex resumed>) = 0 [pid 10603] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10602] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10603] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10603] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10601] <... futex resumed>) = 0 [pid 10603] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10602] <... write resumed>) = 262144 [pid 10602] munmap(0x7f5527ca1000, 262144) = 0 [pid 10602] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10602] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10602] close(4) = 0 [pid 10602] mkdir("./file1", 0777) = 0 [pid 10602] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10602] ioctl(6, LOOP_CLR_FD) = 0 [pid 10602] close(6) = 0 [pid 10602] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10601] exit_group(0 [pid 10602] <... futex resumed>) = 0 [pid 10603] <... futex resumed>) = ? [pid 10601] <... exit_group resumed>) = ? [pid 10603] +++ exited with 0 +++ [pid 10602] +++ exited with 0 +++ [pid 10601] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10601, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1199/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1199/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1199/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1199/bus") = 0 [pid 5052] umount2("./1199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1199/binderfs") = 0 [pid 5052] umount2("./1199/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1199/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1199/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1199/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1199/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1199") = 0 [pid 5052] mkdir("./1200", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 272.446948][T10602] loop0: detected capacity change from 0 to 512 [ 272.456360][T10602] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10604 attached , child_tidptr=0x555556d60690) = 10604 [pid 10604] set_robust_list(0x555556d606a0, 24) = 0 [pid 10604] chdir("./1200") = 0 [pid 10604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10604] setpgid(0, 0) = 0 [pid 10604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10604] write(3, "1000", 4) = 4 [pid 10604] close(3) = 0 [pid 10604] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10604] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10604] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10604] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10604] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10605 attached => {parent_tid=[10605]}, 88) = 10605 [pid 10605] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10604] rt_sigprocmask(SIG_SETMASK, [], [pid 10605] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10605] rt_sigprocmask(SIG_SETMASK, [], [pid 10604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10604] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10604] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10605] memfd_create("syzkaller", 0 [pid 10604] <... mmap resumed>) = 0x7f55300a1000 [pid 10604] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10605] <... memfd_create resumed>) = 3 [pid 10604] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10604] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10606 attached [pid 10606] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10606] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10606] rt_sigprocmask(SIG_SETMASK, [], [pid 10604] <... clone3 resumed> => {parent_tid=[10606]}, 88) = 10606 [pid 10606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10604] rt_sigprocmask(SIG_SETMASK, [], [pid 10606] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10604] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10606] <... futex resumed>) = 0 [pid 10604] <... futex resumed>) = 1 [pid 10606] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10604] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10606] <... open resumed>) = 4 [pid 10605] <... mmap resumed>) = 0x7f5527ca1000 [pid 10606] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10604] <... futex resumed>) = 0 [pid 10604] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10604] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10606] <... futex resumed>) = 1 [pid 10606] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10606] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10604] <... futex resumed>) = 0 [pid 10606] <... futex resumed>) = 1 [pid 10606] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10604] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10606] <... open resumed>) = 5 [pid 10604] <... futex resumed>) = 0 [pid 10604] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10606] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10604] <... futex resumed>) = 0 [pid 10606] <... futex resumed>) = 1 [pid 10604] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10606] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10604] <... futex resumed>) = 0 [pid 10606] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10604] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10606] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10606] <... futex resumed>) = 0 [pid 10606] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10605] munmap(0x7f5527ca1000, 262144) = 0 [pid 10605] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10605] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10605] close(3) = 0 [pid 10605] mkdir("./file1", 0777) = 0 [pid 10605] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10605] ioctl(6, LOOP_CLR_FD) = 0 [pid 10605] close(6) = 0 [pid 10605] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10605] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10604] exit_group(0 [pid 10605] <... futex resumed>) = ? [pid 10605] +++ exited with 0 +++ [pid 10604] <... exit_group resumed>) = ? [pid 10606] <... futex resumed>) = ? [pid 10606] +++ exited with 0 +++ [pid 10604] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10604, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1200/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1200/bus") = 0 [pid 5052] umount2("./1200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1200/binderfs") = 0 [pid 5052] umount2("./1200/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1200/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1200/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1200/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1200/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1200") = 0 [pid 5052] mkdir("./1201", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 272.547804][T10605] loop0: detected capacity change from 0 to 512 [ 272.557499][T10605] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10607 attached , child_tidptr=0x555556d60690) = 10607 [pid 10607] set_robust_list(0x555556d606a0, 24) = 0 [pid 10607] chdir("./1201") = 0 [pid 10607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10607] setpgid(0, 0) = 0 [pid 10607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10607] write(3, "1000", 4) = 4 [pid 10607] close(3) = 0 [pid 10607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10607] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10607] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10607] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10607] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10607] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10608]}, 88) = 10608 ./strace-static-x86_64: Process 10608 attached [pid 10608] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10607] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10607] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10608] <... rseq resumed>) = 0 [pid 10608] set_robust_list(0x7f55300e29a0, 24 [pid 10607] <... futex resumed>) = 0 [pid 10608] <... set_robust_list resumed>) = 0 [pid 10608] rt_sigprocmask(SIG_SETMASK, [], [pid 10607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10608] memfd_create("syzkaller", 0) = 3 [pid 10608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10607] <... mmap resumed>) = 0x7f5527ca1000 [pid 10607] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10607] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10609 attached [pid 10609] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10607] <... clone3 resumed> => {parent_tid=[10609]}, 88) = 10609 [pid 10609] <... rseq resumed>) = 0 [pid 10607] rt_sigprocmask(SIG_SETMASK, [], [pid 10609] set_robust_list(0x7f5527cc19a0, 24 [pid 10608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10609] <... set_robust_list resumed>) = 0 [pid 10607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10607] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10609] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10607] <... futex resumed>) = 0 [pid 10607] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10609] <... open resumed>) = 4 [pid 10609] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10607] <... futex resumed>) = 0 [pid 10609] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10607] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10607] <... futex resumed>) = 0 [pid 10609] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10607] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10608] <... write resumed>) = 262144 [pid 10609] <... mount resumed>) = 0 [pid 10608] munmap(0x7f5527cc2000, 262144 [pid 10609] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10607] <... futex resumed>) = 0 [pid 10609] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10608] <... munmap resumed>) = 0 [pid 10607] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10609] <... futex resumed>) = 0 [pid 10608] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10607] <... futex resumed>) = 1 [pid 10607] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10609] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10609] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10608] <... openat resumed>) = 5 [pid 10607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10608] ioctl(5, LOOP_SET_FD, 3 [pid 10607] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10609] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10607] <... futex resumed>) = 0 [pid 10609] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10609] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10609] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10607] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10608] <... ioctl resumed>) = 0 [pid 10608] close(3) = 0 [pid 10608] mkdir("./file1", 0777) = 0 [pid 10608] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10608] ioctl(5, LOOP_CLR_FD) = 0 [pid 10608] close(5) = 0 [pid 10608] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10608] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10607] exit_group(0 [pid 10609] <... futex resumed>) = ? [pid 10608] <... futex resumed>) = ? [pid 10607] <... exit_group resumed>) = ? [pid 10609] +++ exited with 0 +++ [pid 10608] +++ exited with 0 +++ [pid 10607] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10607, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1201/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1201/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1201/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1201/bus") = 0 [pid 5052] umount2("./1201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1201/binderfs") = 0 [pid 5052] umount2("./1201/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1201/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1201/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1201/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1201/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1201") = 0 [ 272.653180][T10608] loop0: detected capacity change from 0 to 512 [ 272.663176][T10608] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1202", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10610 ./strace-static-x86_64: Process 10610 attached [pid 10610] set_robust_list(0x555556d606a0, 24) = 0 [pid 10610] chdir("./1202") = 0 [pid 10610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10610] setpgid(0, 0) = 0 [pid 10610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10610] write(3, "1000", 4) = 4 [pid 10610] close(3) = 0 [pid 10610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10610] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10610] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10610] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10611 attached => {parent_tid=[10611]}, 88) = 10611 [pid 10610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10610] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10610] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10611] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10610] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10611] <... rseq resumed>) = 0 [pid 10610] <... mprotect resumed>) = 0 [pid 10610] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10611] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10611] rt_sigprocmask(SIG_SETMASK, [], [pid 10610] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10611] memfd_create("syzkaller", 0./strace-static-x86_64: Process 10612 attached [pid 10612] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10611] <... memfd_create resumed>) = 3 [pid 10611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10612] set_robust_list(0x7f55300c19a0, 24 [pid 10610] <... clone3 resumed> => {parent_tid=[10612]}, 88) = 10612 [pid 10612] <... set_robust_list resumed>) = 0 [pid 10610] rt_sigprocmask(SIG_SETMASK, [], [pid 10612] rt_sigprocmask(SIG_SETMASK, [], [pid 10610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10610] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10612] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10610] <... futex resumed>) = 0 [pid 10612] <... open resumed>) = 4 [pid 10611] <... mmap resumed>) = 0x7f5527ca1000 [pid 10610] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10612] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10610] <... futex resumed>) = 0 [pid 10610] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10610] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10612] <... futex resumed>) = 1 [pid 10612] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10612] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10610] <... futex resumed>) = 0 [pid 10612] <... futex resumed>) = 1 [pid 10610] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10612] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10610] <... futex resumed>) = 0 [pid 10610] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10612] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10610] <... futex resumed>) = 0 [pid 10612] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10610] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10610] <... futex resumed>) = 0 [pid 10612] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10610] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10612] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10612] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10610] <... futex resumed>) = 0 [pid 10612] <... futex resumed>) = 1 [pid 10612] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10611] <... write resumed>) = 262144 [pid 10611] munmap(0x7f5527ca1000, 262144) = 0 [pid 10611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10611] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10611] close(3) = 0 [pid 10611] mkdir("./file1", 0777) = 0 [pid 10611] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10611] ioctl(6, LOOP_CLR_FD) = 0 [pid 10611] close(6) = 0 [pid 10611] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10611] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10610] exit_group(0) = ? [pid 10612] <... futex resumed>) = ? [pid 10611] <... futex resumed>) = ? [pid 10612] +++ exited with 0 +++ [pid 10611] +++ exited with 0 +++ [pid 10610] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10610, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1202/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1202/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1202/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1202/bus") = 0 [pid 5052] umount2("./1202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1202/binderfs") = 0 [pid 5052] umount2("./1202/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1202/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1202/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1202/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1202/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1202") = 0 [pid 5052] mkdir("./1203", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10613 attached , child_tidptr=0x555556d60690) = 10613 [pid 10613] set_robust_list(0x555556d606a0, 24) = 0 [pid 10613] chdir("./1203") = 0 [pid 10613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10613] setpgid(0, 0) = 0 [pid 10613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10613] write(3, "1000", 4) = 4 [pid 10613] close(3) = 0 [pid 10613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10613] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10613] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10613] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10613] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10614 attached => {parent_tid=[10614]}, 88) = 10614 [pid 10614] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10613] rt_sigprocmask(SIG_SETMASK, [], [pid 10614] <... rseq resumed>) = 0 [pid 10613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10614] set_robust_list(0x7f55300e29a0, 24 [pid 10613] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10614] <... set_robust_list resumed>) = 0 [pid 10614] rt_sigprocmask(SIG_SETMASK, [], [pid 10613] <... futex resumed>) = 0 [pid 10614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10613] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10614] memfd_create("syzkaller", 0 [pid 10613] <... futex resumed>) = 0 [pid 10613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10614] <... memfd_create resumed>) = 3 [pid 10613] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10613] <... mprotect resumed>) = 0 [pid 10614] <... mmap resumed>) = 0x7f5527ca1000 [pid 10613] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [ 272.760560][T10611] loop0: detected capacity change from 0 to 512 [ 272.769418][T10611] ext4: Unknown parameter 'nouser_xattr' [pid 10613] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10615]}, 88) = 10615 [pid 10613] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10615 attached NULL, 8) = 0 [pid 10613] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10613] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10615] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10615] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10615] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10614] <... write resumed>) = 262144 [pid 10614] munmap(0x7f5527ca1000, 262144) = 0 [pid 10614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10614] ioctl(5, LOOP_SET_FD, 3 [pid 10615] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10613] <... futex resumed>) = 0 [pid 10613] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10613] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10614] <... ioctl resumed>) = 0 [pid 10614] close(3) = 0 [pid 10614] mkdir("./file1", 0777 [pid 10615] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10615] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10613] <... futex resumed>) = 0 [pid 10615] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10613] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10615] <... futex resumed>) = 0 [pid 10613] <... futex resumed>) = 1 [pid 10615] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10613] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10615] <... open resumed>) = 3 [pid 10615] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10613] <... futex resumed>) = 0 [pid 10615] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10613] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10615] <... futex resumed>) = 0 [pid 10613] <... futex resumed>) = 1 [pid 10615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10613] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10614] <... mkdir resumed>) = 0 [pid 10614] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10614] ioctl(5, LOOP_CLR_FD) = 0 [pid 10614] close(5) = 0 [pid 10614] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10614] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10615] <... write resumed>) = 262144 [pid 10615] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10613] <... futex resumed>) = 0 [pid 10613] exit_group(0) = ? [pid 10614] <... futex resumed>) = ? [pid 10614] +++ exited with 0 +++ [pid 10615] <... futex resumed>) = ? [pid 10615] +++ exited with 0 +++ [pid 10613] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10613, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1203/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1203/bus") = 0 [pid 5052] umount2("./1203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1203/binderfs") = 0 [pid 5052] umount2("./1203/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1203/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1203/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1203/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1203/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 272.831898][T10614] loop0: detected capacity change from 0 to 512 [ 272.846618][T10614] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1203") = 0 [pid 5052] mkdir("./1204", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10616 attached , child_tidptr=0x555556d60690) = 10616 [pid 10616] set_robust_list(0x555556d606a0, 24) = 0 [pid 10616] chdir("./1204") = 0 [pid 10616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10616] setpgid(0, 0) = 0 [pid 10616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10616] write(3, "1000", 4) = 4 [pid 10616] close(3) = 0 [pid 10616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10616] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10616] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10616] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10616] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10616] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10617 attached [pid 10617] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10616] <... clone3 resumed> => {parent_tid=[10617]}, 88) = 10617 [pid 10617] <... rseq resumed>) = 0 [pid 10617] set_robust_list(0x7f55300e29a0, 24 [pid 10616] rt_sigprocmask(SIG_SETMASK, [], [pid 10617] <... set_robust_list resumed>) = 0 [pid 10616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10617] rt_sigprocmask(SIG_SETMASK, [], [pid 10616] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10616] <... futex resumed>) = 0 [pid 10617] memfd_create("syzkaller", 0 [pid 10616] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10617] <... memfd_create resumed>) = 3 [pid 10616] <... mmap resumed>) = 0x7f55300a1000 [pid 10617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10616] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10616] <... mprotect resumed>) = 0 [pid 10616] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10618]}, 88) = 10618 [pid 10616] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10616] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10616] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10617] <... write resumed>) = 262144 [pid 10617] munmap(0x7f5527ca1000, 262144) = 0 [pid 10617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10617] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 10618 attached [pid 10618] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10617] <... ioctl resumed>) = 0 [pid 10618] <... rseq resumed>) = 0 [pid 10617] close(3 [pid 10618] set_robust_list(0x7f55300c19a0, 24 [pid 10617] <... close resumed>) = 0 [pid 10618] <... set_robust_list resumed>) = 0 [pid 10618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10617] mkdir("./file1", 0777 [pid 10618] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 3 [pid 10617] <... mkdir resumed>) = 0 [pid 10618] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10618] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10616] <... futex resumed>) = 0 [pid 10616] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10617] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10618] <... futex resumed>) = 0 [pid 10616] <... futex resumed>) = 1 [pid 10618] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10616] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10618] <... mount resumed>) = 0 [pid 10618] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10618] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10616] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10618] <... futex resumed>) = 0 [pid 10618] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10618] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10618] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10616] <... futex resumed>) = 1 [pid 10616] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10616] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10618] <... futex resumed>) = 0 [pid 10618] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10617] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10617] ioctl(4, LOOP_CLR_FD [pid 10616] <... futex resumed>) = 1 [pid 10617] <... ioctl resumed>) = 0 [pid 10616] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10617] close(4) = 0 [pid 10617] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10617] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10618] <... write resumed>) = 262144 [pid 10618] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10618] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10616] <... futex resumed>) = 0 [pid 10616] exit_group(0 [pid 10618] <... futex resumed>) = ? [pid 10616] <... exit_group resumed>) = ? [pid 10618] +++ exited with 0 +++ [pid 10617] <... futex resumed>) = ? [pid 10617] +++ exited with 0 +++ [pid 10616] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10616, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1204/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1204/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 272.934993][T10617] loop0: detected capacity change from 0 to 512 [ 272.953612][T10617] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1204/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1204/bus") = 0 [pid 5052] umount2("./1204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1204/binderfs") = 0 [pid 5052] umount2("./1204/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1204/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1204/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1204/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1204/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1204") = 0 [pid 5052] mkdir("./1205", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10619 attached , child_tidptr=0x555556d60690) = 10619 [pid 10619] set_robust_list(0x555556d606a0, 24) = 0 [pid 10619] chdir("./1205") = 0 [pid 10619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10619] setpgid(0, 0) = 0 [pid 10619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10619] write(3, "1000", 4) = 4 [pid 10619] close(3) = 0 [pid 10619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10619] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10619] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10619] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10620 attached => {parent_tid=[10620]}, 88) = 10620 [pid 10619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10619] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10619] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10620] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10619] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10620] <... rseq resumed>) = 0 [pid 10619] <... mprotect resumed>) = 0 [pid 10620] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10620] rt_sigprocmask(SIG_SETMASK, [], [pid 10619] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10620] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10620] memfd_create("syzkaller", 0 [pid 10619] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10620] <... memfd_create resumed>) = 3 [pid 10620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 ./strace-static-x86_64: Process 10621 attached [pid 10619] <... clone3 resumed> => {parent_tid=[10621]}, 88) = 10621 [pid 10621] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10619] rt_sigprocmask(SIG_SETMASK, [], [pid 10621] <... rseq resumed>) = 0 [pid 10619] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10621] set_robust_list(0x7f55300c19a0, 24 [pid 10619] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10621] <... set_robust_list resumed>) = 0 [pid 10619] <... futex resumed>) = 0 [pid 10619] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10621] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10621] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10620] <... write resumed>) = 262144 [pid 10619] <... futex resumed>) = 0 [pid 10621] <... futex resumed>) = 1 [pid 10619] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10621] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10619] <... futex resumed>) = 0 [pid 10621] <... mount resumed>) = 0 [pid 10619] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10621] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10619] <... futex resumed>) = 0 [pid 10619] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10621] <... futex resumed>) = 1 [pid 10619] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10621] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10621] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10619] <... futex resumed>) = 0 [pid 10621] <... futex resumed>) = 1 [pid 10619] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10621] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10619] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10621] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10621] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10621] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10620] munmap(0x7f5527ca1000, 262144) = 0 [pid 10620] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10620] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10620] close(3) = 0 [pid 10620] mkdir("./file1", 0777) = 0 [pid 10620] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10620] ioctl(6, LOOP_CLR_FD) = 0 [pid 10620] close(6) = 0 [pid 10620] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10619] exit_group(0 [pid 10621] <... futex resumed>) = ? [pid 10619] <... exit_group resumed>) = ? [pid 10621] +++ exited with 0 +++ [pid 10620] +++ exited with 0 +++ [pid 10619] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10619, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1205/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1205/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1205/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1205/bus") = 0 [pid 5052] umount2("./1205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1205/binderfs") = 0 [pid 5052] umount2("./1205/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1205/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1205/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1205/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1205/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1205") = 0 [pid 5052] mkdir("./1206", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10622 attached , child_tidptr=0x555556d60690) = 10622 [pid 10622] set_robust_list(0x555556d606a0, 24) = 0 [pid 10622] chdir("./1206") = 0 [pid 10622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10622] setpgid(0, 0) = 0 [pid 10622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10622] write(3, "1000", 4) = 4 [pid 10622] close(3) = 0 [pid 10622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10622] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10622] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10622] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10622] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10623 attached [pid 10623] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10622] <... clone3 resumed> => {parent_tid=[10623]}, 88) = 10623 [pid 10623] set_robust_list(0x7f55300e29a0, 24 [pid 10622] rt_sigprocmask(SIG_SETMASK, [], [pid 10623] <... set_robust_list resumed>) = 0 [pid 10623] rt_sigprocmask(SIG_SETMASK, [], [pid 10622] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10622] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10623] memfd_create("syzkaller", 0 [pid 10622] <... futex resumed>) = 0 [pid 10622] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10623] <... memfd_create resumed>) = 3 [pid 10622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10622] <... mmap resumed>) = 0x7f55300a1000 [pid 10623] <... mmap resumed>) = 0x7f5527ca1000 [pid 10622] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10624]}, 88) = 10624 [pid 10622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 10624 attached [pid 10624] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10622] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10624] <... rseq resumed>) = 0 [pid 10623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10622] <... futex resumed>) = 0 [ 273.059235][T10620] loop0: detected capacity change from 0 to 512 [ 273.069451][T10620] ext4: Unknown parameter 'nouser_xattr' [pid 10622] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10624] set_robust_list(0x7f55300c19a0, 24 [pid 10623] <... write resumed>) = 262144 [pid 10623] munmap(0x7f5527ca1000, 262144 [pid 10624] <... set_robust_list resumed>) = 0 [pid 10623] <... munmap resumed>) = 0 [pid 10623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10623] ioctl(4, LOOP_SET_FD, 3 [pid 10624] rt_sigprocmask(SIG_SETMASK, [], [pid 10623] <... ioctl resumed>) = 0 [pid 10623] close(3) = 0 [pid 10623] mkdir("./file1", 0777 [pid 10624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10624] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10623] <... mkdir resumed>) = 0 [pid 10623] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10624] <... open resumed>) = 3 [pid 10624] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10622] <... futex resumed>) = 0 [pid 10622] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10622] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10624] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10624] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10622] <... futex resumed>) = 0 [pid 10624] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10622] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10624] <... futex resumed>) = 0 [pid 10622] <... futex resumed>) = 1 [pid 10622] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10624] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10624] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10623] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10623] ioctl(4, LOOP_CLR_FD [pid 10624] <... futex resumed>) = 1 [pid 10623] <... ioctl resumed>) = 0 [pid 10622] <... futex resumed>) = 0 [pid 10623] close(4 [pid 10622] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10623] <... close resumed>) = 0 [pid 10622] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10623] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10623] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10624] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 10624] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10622] <... futex resumed>) = 0 [pid 10622] exit_group(0) = ? [pid 10623] <... futex resumed>) = ? [pid 10624] +++ exited with 0 +++ [pid 10623] +++ exited with 0 +++ [pid 10622] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10622, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 273.126697][T10623] loop0: detected capacity change from 0 to 512 [ 273.138293][T10623] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1206/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1206/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1206/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1206/bus") = 0 [pid 5052] umount2("./1206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1206/binderfs") = 0 [pid 5052] umount2("./1206/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1206/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1206/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1206/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1206/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1206") = 0 [pid 5052] mkdir("./1207", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10625 attached , child_tidptr=0x555556d60690) = 10625 [pid 10625] set_robust_list(0x555556d606a0, 24) = 0 [pid 10625] chdir("./1207") = 0 [pid 10625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10625] setpgid(0, 0) = 0 [pid 10625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10625] write(3, "1000", 4) = 4 [pid 10625] close(3) = 0 [pid 10625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10625] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10625] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10625] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10625] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10626]}, 88) = 10626 [pid 10625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10625] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10625] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 ./strace-static-x86_64: Process 10626 attached [pid 10625] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10625] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10626] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10625] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10626] <... rseq resumed>) = 0 [pid 10626] set_robust_list(0x7f55300e29a0, 24 [pid 10625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10626] <... set_robust_list resumed>) = 0 [pid 10626] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10627 attached NULL, 8) = 0 [pid 10627] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10627] set_robust_list(0x7f55300c19a0, 24 [pid 10626] memfd_create("syzkaller", 0 [pid 10625] <... clone3 resumed> => {parent_tid=[10627]}, 88) = 10627 [pid 10627] <... set_robust_list resumed>) = 0 [pid 10626] <... memfd_create resumed>) = 3 [pid 10625] rt_sigprocmask(SIG_SETMASK, [], [pid 10627] rt_sigprocmask(SIG_SETMASK, [], [pid 10626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10627] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10627] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10625] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10626] <... mmap resumed>) = 0x7f5527ca1000 [pid 10625] <... futex resumed>) = 0 [pid 10627] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10625] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10627] <... open resumed>) = 4 [pid 10627] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10625] <... futex resumed>) = 0 [pid 10625] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10625] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10627] <... futex resumed>) = 1 [pid 10627] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10627] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10625] <... futex resumed>) = 0 [pid 10625] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10625] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10627] <... futex resumed>) = 1 [pid 10627] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10627] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10625] <... futex resumed>) = 0 [pid 10625] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10627] <... futex resumed>) = 1 [pid 10625] <... futex resumed>) = 0 [pid 10627] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10625] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10627] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10627] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10625] <... futex resumed>) = 0 [pid 10627] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10626] munmap(0x7f5527ca1000, 262144) = 0 [pid 10626] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10626] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10626] close(3) = 0 [pid 10626] mkdir("./file1", 0777) = 0 [pid 10626] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10626] ioctl(6, LOOP_CLR_FD) = 0 [pid 10626] close(6) = 0 [pid 10626] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10625] exit_group(0 [pid 10627] <... futex resumed>) = ? [pid 10625] <... exit_group resumed>) = ? [pid 10627] +++ exited with 0 +++ [pid 10626] <... futex resumed>) = ? [pid 10626] +++ exited with 0 +++ [pid 10625] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10625, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1207/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1207/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1207/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1207/bus") = 0 [pid 5052] umount2("./1207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1207/binderfs") = 0 [pid 5052] umount2("./1207/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1207/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1207/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1207/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1207/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1207") = 0 [pid 5052] mkdir("./1208", 0777) = 0 [ 273.242178][T10626] loop0: detected capacity change from 0 to 512 [ 273.252634][T10626] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10628 attached , child_tidptr=0x555556d60690) = 10628 [pid 10628] set_robust_list(0x555556d606a0, 24) = 0 [pid 10628] chdir("./1208") = 0 [pid 10628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10628] setpgid(0, 0) = 0 [pid 10628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10628] write(3, "1000", 4) = 4 [pid 10628] close(3) = 0 [pid 10628] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10628] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10628] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10628] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10628] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10628] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10628] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10629 attached => {parent_tid=[10629]}, 88) = 10629 [pid 10628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10628] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10628] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10629] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10629] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10629] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10628] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10629] memfd_create("syzkaller", 0 [pid 10628] <... mprotect resumed>) = 0 [pid 10628] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10629] <... memfd_create resumed>) = 3 [pid 10628] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10628] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10630 attached [pid 10630] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10628] <... clone3 resumed> => {parent_tid=[10630]}, 88) = 10630 [pid 10630] set_robust_list(0x7f55300c19a0, 24 [pid 10629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10630] <... set_robust_list resumed>) = 0 [pid 10628] rt_sigprocmask(SIG_SETMASK, [], [pid 10630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10630] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10628] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10628] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10630] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10628] <... futex resumed>) = 0 [pid 10630] <... open resumed>) = 4 [pid 10629] <... write resumed>) = 262144 [pid 10628] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10630] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10628] <... futex resumed>) = 0 [pid 10628] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10628] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10630] <... futex resumed>) = 1 [pid 10630] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10630] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10628] <... futex resumed>) = 0 [pid 10628] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10628] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10630] <... futex resumed>) = 1 [pid 10630] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10630] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10628] <... futex resumed>) = 0 [pid 10630] <... futex resumed>) = 1 [pid 10628] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10630] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10629] munmap(0x7f5527ca1000, 262144 [pid 10628] <... futex resumed>) = 0 [pid 10630] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10628] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10630] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10629] <... munmap resumed>) = 0 [pid 10629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10629] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10629] close(3) = 0 [pid 10629] mkdir("./file1", 0777) = 0 [pid 10629] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10629] ioctl(6, LOOP_CLR_FD) = 0 [pid 10629] close(6) = 0 [pid 10629] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10629] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10628] exit_group(0 [pid 10630] <... futex resumed>) = ? [pid 10629] <... futex resumed>) = ? [pid 10630] +++ exited with 0 +++ [pid 10629] +++ exited with 0 +++ [pid 10628] <... exit_group resumed>) = ? [pid 10628] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10628, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1208", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1208/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1208/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1208/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1208/bus") = 0 [pid 5052] umount2("./1208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1208/binderfs") = 0 [pid 5052] umount2("./1208/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1208/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1208/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1208/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1208/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1208") = 0 [ 273.357295][T10629] loop0: detected capacity change from 0 to 512 [ 273.370017][T10629] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1209", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10631 attached , child_tidptr=0x555556d60690) = 10631 [pid 10631] set_robust_list(0x555556d606a0, 24) = 0 [pid 10631] chdir("./1209") = 0 [pid 10631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10631] setpgid(0, 0) = 0 [pid 10631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10631] write(3, "1000", 4) = 4 [pid 10631] close(3) = 0 [pid 10631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10631] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10631] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10631] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10632 attached => {parent_tid=[10632]}, 88) = 10632 [pid 10632] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10631] rt_sigprocmask(SIG_SETMASK, [], [pid 10632] <... rseq resumed>) = 0 [pid 10632] set_robust_list(0x7f55300e29a0, 24 [pid 10631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10632] <... set_robust_list resumed>) = 0 [pid 10631] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10632] rt_sigprocmask(SIG_SETMASK, [], [pid 10631] <... futex resumed>) = 0 [pid 10632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10631] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10632] memfd_create("syzkaller", 0 [pid 10631] <... futex resumed>) = 0 [pid 10631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10632] <... memfd_create resumed>) = 3 [pid 10631] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10631] <... mprotect resumed>) = 0 [pid 10632] <... mmap resumed>) = 0x7f5527ca1000 [pid 10631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10633]}, 88) = 10633 [pid 10631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10631] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10631] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10633 attached [pid 10633] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10633] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10632] <... write resumed>) = 262144 [pid 10632] munmap(0x7f5527ca1000, 262144 [pid 10633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10633] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10632] <... munmap resumed>) = 0 [pid 10632] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10633] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10631] <... futex resumed>) = 0 [pid 10633] <... futex resumed>) = 1 [pid 10633] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10631] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10632] <... openat resumed>) = 5 [pid 10631] <... futex resumed>) = 0 [pid 10631] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10632] ioctl(5, LOOP_SET_FD, 3 [pid 10633] <... mount resumed>) = 0 [pid 10633] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10633] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10632] <... ioctl resumed>) = 0 [pid 10631] <... futex resumed>) = 0 [pid 10632] close(3 [pid 10631] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10633] <... futex resumed>) = 0 [pid 10632] <... close resumed>) = 0 [pid 10631] <... futex resumed>) = 1 [pid 10633] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10632] mkdir("./file1", 0777 [pid 10631] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10633] <... open resumed>) = 3 [pid 10633] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10633] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10631] <... futex resumed>) = 0 [pid 10633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10631] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10631] <... futex resumed>) = 0 [pid 10632] <... mkdir resumed>) = 0 [pid 10631] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10632] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10632] ioctl(5, LOOP_CLR_FD) = 0 [pid 10632] close(5 [pid 10633] <... write resumed>) = 262144 [pid 10632] <... close resumed>) = 0 [pid 10633] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10632] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10633] <... futex resumed>) = 1 [pid 10631] <... futex resumed>) = 0 [pid 10631] exit_group(0) = ? [pid 10632] <... futex resumed>) = ? [pid 10633] +++ exited with 0 +++ [pid 10632] +++ exited with 0 +++ [pid 10631] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10631, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] umount2("./1209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1209/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1209/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1209/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1209/bus") = 0 [pid 5052] umount2("./1209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1209/binderfs") = 0 [ 273.458533][T10632] loop0: detected capacity change from 0 to 512 [ 273.471165][T10632] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1209/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1209/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1209/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1209/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1209/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1209") = 0 [pid 5052] mkdir("./1210", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10634 attached , child_tidptr=0x555556d60690) = 10634 [pid 10634] set_robust_list(0x555556d606a0, 24) = 0 [pid 10634] chdir("./1210") = 0 [pid 10634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10634] setpgid(0, 0) = 0 [pid 10634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10634] write(3, "1000", 4) = 4 [pid 10634] close(3) = 0 [pid 10634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10634] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10634] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10634] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10634] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10634] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10635 attached => {parent_tid=[10635]}, 88) = 10635 [pid 10634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10634] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10634] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10634] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10634] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10636 attached [pid 10636] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10635] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10634] <... clone3 resumed> => {parent_tid=[10636]}, 88) = 10636 [pid 10636] set_robust_list(0x7f55300c19a0, 24 [pid 10635] <... rseq resumed>) = 0 [pid 10634] rt_sigprocmask(SIG_SETMASK, [], [pid 10636] <... set_robust_list resumed>) = 0 [pid 10635] set_robust_list(0x7f55300e29a0, 24 [pid 10636] rt_sigprocmask(SIG_SETMASK, [], [pid 10635] <... set_robust_list resumed>) = 0 [pid 10634] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10635] rt_sigprocmask(SIG_SETMASK, [], [pid 10634] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10634] <... futex resumed>) = 0 [pid 10636] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10635] memfd_create("syzkaller", 0 [pid 10634] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10636] <... open resumed>) = 3 [pid 10635] <... memfd_create resumed>) = 4 [pid 10636] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10636] <... futex resumed>) = 1 [pid 10635] <... mmap resumed>) = 0x7f5527ca1000 [pid 10634] <... futex resumed>) = 0 [pid 10636] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10634] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10636] <... mount resumed>) = 0 [pid 10634] <... futex resumed>) = 0 [pid 10634] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10636] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10634] <... futex resumed>) = 0 [pid 10636] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10634] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10635] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10636] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10634] <... futex resumed>) = 0 [pid 10636] <... open resumed>) = 5 [pid 10634] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10636] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10634] <... futex resumed>) = 0 [pid 10634] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10634] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10636] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10635] <... write resumed>) = 262144 [pid 10635] munmap(0x7f5527ca1000, 262144 [pid 10636] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10635] <... munmap resumed>) = 0 [pid 10634] <... futex resumed>) = 0 [pid 10636] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10635] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10635] close(4) = 0 [pid 10635] mkdir("./file1", 0777) = 0 [pid 10635] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10635] ioctl(6, LOOP_CLR_FD) = 0 [pid 10635] close(6) = 0 [pid 10635] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10635] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10634] exit_group(0 [pid 10636] <... futex resumed>) = ? [pid 10636] +++ exited with 0 +++ [pid 10634] <... exit_group resumed>) = ? [pid 10635] <... futex resumed>) = ? [pid 10635] +++ exited with 0 +++ [pid 10634] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10634, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1210", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1210/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1210/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1210/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1210/bus") = 0 [pid 5052] umount2("./1210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1210/binderfs") = 0 [pid 5052] umount2("./1210/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1210/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1210/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1210/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1210/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1210") = 0 [pid 5052] mkdir("./1211", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 273.578468][T10635] loop0: detected capacity change from 0 to 512 [ 273.588215][T10635] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10637 attached , child_tidptr=0x555556d60690) = 10637 [pid 10637] set_robust_list(0x555556d606a0, 24) = 0 [pid 10637] chdir("./1211") = 0 [pid 10637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10637] setpgid(0, 0) = 0 [pid 10637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10637] write(3, "1000", 4) = 4 [pid 10637] close(3) = 0 [pid 10637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10637] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10637] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10637] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10638 attached [pid 10638] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10637] <... clone3 resumed> => {parent_tid=[10638]}, 88) = 10638 [pid 10638] <... rseq resumed>) = 0 [pid 10637] rt_sigprocmask(SIG_SETMASK, [], [pid 10638] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10638] rt_sigprocmask(SIG_SETMASK, [], [pid 10637] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10638] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10637] <... futex resumed>) = 0 [pid 10638] memfd_create("syzkaller", 0 [pid 10637] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10638] <... memfd_create resumed>) = 3 [pid 10637] <... mmap resumed>) = 0x7f55300a1000 [pid 10638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10637] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10638] <... mmap resumed>) = 0x7f5527ca1000 [pid 10637] <... mprotect resumed>) = 0 [pid 10637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10639]}, 88) = 10639 [pid 10637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10637] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10637] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10639 attached [pid 10639] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10639] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10638] <... write resumed>) = 262144 [pid 10638] munmap(0x7f5527ca1000, 262144 [pid 10639] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10638] <... munmap resumed>) = 0 [pid 10638] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10639] <... open resumed>) = 4 [pid 10639] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10637] <... futex resumed>) = 0 [pid 10639] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10638] <... openat resumed>) = 5 [pid 10637] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10639] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10637] <... futex resumed>) = 0 [pid 10638] ioctl(5, LOOP_SET_FD, 3 [pid 10637] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10639] <... mount resumed>) = 0 [pid 10639] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10639] <... futex resumed>) = 0 [pid 10637] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10639] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10637] <... futex resumed>) = 0 [pid 10639] <... open resumed>) = 6 [pid 10639] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10639] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10637] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10637] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10638] <... ioctl resumed>) = 0 [pid 10639] <... futex resumed>) = 0 [pid 10637] <... futex resumed>) = 1 [pid 10639] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10638] close(3) = 0 [pid 10638] mkdir("./file1", 0777) = 0 [pid 10638] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10637] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10638] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10638] ioctl(5, LOOP_CLR_FD) = 0 [pid 10638] close(5) = 0 [pid 10638] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10638] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10639] <... write resumed>) = 262144 [pid 10639] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10637] <... futex resumed>) = 0 [pid 10639] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10637] exit_group(0 [pid 10639] <... futex resumed>) = ? [pid 10638] <... futex resumed>) = ? [pid 10637] <... exit_group resumed>) = ? [pid 10638] +++ exited with 0 +++ [pid 10639] +++ exited with 0 +++ [pid 10637] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10637, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1211/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1211/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1211/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1211/bus") = 0 [pid 5052] umount2("./1211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1211/binderfs") = 0 [ 273.685206][T10638] loop0: detected capacity change from 0 to 512 [ 273.697701][T10638] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1211/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1211/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1211/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1211/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1211/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1211") = 0 [pid 5052] mkdir("./1212", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10640 attached , child_tidptr=0x555556d60690) = 10640 [pid 10640] set_robust_list(0x555556d606a0, 24) = 0 [pid 10640] chdir("./1212") = 0 [pid 10640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10640] setpgid(0, 0) = 0 [pid 10640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10640] write(3, "1000", 4) = 4 [pid 10640] close(3) = 0 [pid 10640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10640] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10640] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10640] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10640] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10641 attached => {parent_tid=[10641]}, 88) = 10641 [pid 10641] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10640] rt_sigprocmask(SIG_SETMASK, [], [pid 10641] <... rseq resumed>) = 0 [pid 10641] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10641] rt_sigprocmask(SIG_SETMASK, [], [pid 10640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10640] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10640] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10641] memfd_create("syzkaller", 0 [pid 10640] <... futex resumed>) = 0 [pid 10641] <... memfd_create resumed>) = 3 [pid 10640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10640] <... mmap resumed>) = 0x7f55300a1000 [pid 10641] <... mmap resumed>) = 0x7f5527ca1000 [pid 10640] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10640] <... clone3 resumed> => {parent_tid=[10642]}, 88) = 10642 [pid 10640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10640] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10640] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10642 attached [pid 10642] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10642] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10642] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10642] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10640] <... futex resumed>) = 0 [pid 10641] <... write resumed>) = 262144 [pid 10642] <... futex resumed>) = 1 [pid 10640] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10642] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10640] <... futex resumed>) = 0 [pid 10640] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10642] <... mount resumed>) = 0 [pid 10641] munmap(0x7f5527ca1000, 262144 [pid 10642] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10640] <... futex resumed>) = 0 [pid 10642] <... futex resumed>) = 1 [pid 10640] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10642] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10640] <... futex resumed>) = 0 [pid 10642] <... open resumed>) = 5 [pid 10641] <... munmap resumed>) = 0 [pid 10640] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10642] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10640] <... futex resumed>) = 0 [pid 10642] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10640] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10640] <... futex resumed>) = 0 [pid 10642] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10640] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10642] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10642] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10640] <... futex resumed>) = 0 [pid 10642] <... futex resumed>) = 1 [pid 10642] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10641] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10641] close(3) = 0 [pid 10641] mkdir("./file1", 0777) = 0 [pid 10641] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10641] ioctl(6, LOOP_CLR_FD) = 0 [pid 10641] close(6) = 0 [pid 10641] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10641] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10640] exit_group(0) = ? [pid 10642] <... futex resumed>) = ? [pid 10641] <... futex resumed>) = ? [pid 10642] +++ exited with 0 +++ [pid 10641] +++ exited with 0 +++ [pid 10640] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10640, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1212/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1212/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1212/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1212/bus") = 0 [pid 5052] umount2("./1212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1212/binderfs") = 0 [pid 5052] umount2("./1212/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1212/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1212/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1212/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 273.808855][T10641] loop0: detected capacity change from 0 to 512 [ 273.818292][T10641] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1212/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1212") = 0 [pid 5052] mkdir("./1213", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10643 attached , child_tidptr=0x555556d60690) = 10643 [pid 10643] set_robust_list(0x555556d606a0, 24) = 0 [pid 10643] chdir("./1213") = 0 [pid 10643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10643] setpgid(0, 0) = 0 [pid 10643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10643] write(3, "1000", 4) = 4 [pid 10643] close(3) = 0 [pid 10643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10643] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10643] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10643] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10643] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10643] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10644 attached [pid 10644] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10643] <... clone3 resumed> => {parent_tid=[10644]}, 88) = 10644 [pid 10644] <... rseq resumed>) = 0 [pid 10643] rt_sigprocmask(SIG_SETMASK, [], [pid 10644] set_robust_list(0x7f55300e29a0, 24 [pid 10643] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10644] <... set_robust_list resumed>) = 0 [pid 10643] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10644] rt_sigprocmask(SIG_SETMASK, [], [pid 10643] <... futex resumed>) = 0 [pid 10644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10643] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10644] memfd_create("syzkaller", 0 [pid 10643] <... futex resumed>) = 0 [pid 10643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10644] <... memfd_create resumed>) = 3 [pid 10643] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10643] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10645]}, 88) = 10645 ./strace-static-x86_64: Process 10645 attached [pid 10643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10643] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10643] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10645] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10645] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10645] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10644] <... write resumed>) = 262144 [pid 10645] <... open resumed>) = 4 [pid 10644] munmap(0x7f5527ca1000, 262144 [pid 10645] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10644] <... munmap resumed>) = 0 [pid 10645] <... futex resumed>) = 1 [pid 10645] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10643] <... futex resumed>) = 0 [pid 10645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10643] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10645] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10644] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10643] <... futex resumed>) = 0 [pid 10645] <... mount resumed>) = 0 [pid 10644] <... openat resumed>) = 5 [pid 10643] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10644] ioctl(5, LOOP_SET_FD, 3 [pid 10645] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10643] <... futex resumed>) = 0 [pid 10645] <... futex resumed>) = 1 [pid 10644] <... ioctl resumed>) = 0 [pid 10643] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10645] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10643] <... futex resumed>) = 0 [pid 10645] <... open resumed>) = 6 [pid 10643] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10645] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10643] <... futex resumed>) = 0 [pid 10643] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10643] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10645] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10644] close(3) = 0 [pid 10644] mkdir("./file1", 0777) = 0 [pid 10644] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10644] ioctl(5, LOOP_CLR_FD) = 0 [pid 10644] close(5) = 0 [pid 10645] <... write resumed>) = 262144 [pid 10645] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10643] <... futex resumed>) = 0 [pid 10645] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10644] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10644] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10643] exit_group(0 [pid 10645] <... futex resumed>) = ? [pid 10643] <... exit_group resumed>) = ? [pid 10645] +++ exited with 0 +++ [pid 10644] <... futex resumed>) = ? [pid 10644] +++ exited with 0 +++ [pid 10643] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10643, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1213", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1213/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1213/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1213/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1213/bus") = 0 [pid 5052] umount2("./1213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1213/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 273.916270][T10644] loop0: detected capacity change from 0 to 512 [ 273.930581][T10644] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1213/binderfs") = 0 [pid 5052] umount2("./1213/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1213/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1213/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1213/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1213/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1213") = 0 [pid 5052] mkdir("./1214", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10646 attached , child_tidptr=0x555556d60690) = 10646 [pid 10646] set_robust_list(0x555556d606a0, 24) = 0 [pid 10646] chdir("./1214") = 0 [pid 10646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10646] setpgid(0, 0) = 0 [pid 10646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10646] write(3, "1000", 4) = 4 [pid 10646] close(3) = 0 [pid 10646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10646] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10646] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10646] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10646] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10647 attached [pid 10647] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10646] <... clone3 resumed> => {parent_tid=[10647]}, 88) = 10647 [pid 10647] set_robust_list(0x7f55300e29a0, 24 [pid 10646] rt_sigprocmask(SIG_SETMASK, [], [pid 10647] <... set_robust_list resumed>) = 0 [pid 10646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10647] rt_sigprocmask(SIG_SETMASK, [], [pid 10646] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10646] <... futex resumed>) = 0 [pid 10647] memfd_create("syzkaller", 0 [pid 10646] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10647] <... memfd_create resumed>) = 3 [pid 10646] <... mmap resumed>) = 0x7f55300a1000 [pid 10647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10646] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10647] <... mmap resumed>) = 0x7f5527ca1000 [pid 10646] <... mprotect resumed>) = 0 [pid 10646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10648 attached => {parent_tid=[10648]}, 88) = 10648 [pid 10646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10646] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10646] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10647] munmap(0x7f5527ca1000, 262144) = 0 [pid 10647] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10648] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10647] <... openat resumed>) = 4 [pid 10647] ioctl(4, LOOP_SET_FD, 3 [pid 10648] <... rseq resumed>) = 0 [pid 10648] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10648] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 10648] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10646] <... futex resumed>) = 0 [pid 10647] <... ioctl resumed>) = 0 [pid 10648] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10646] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10647] close(3 [pid 10646] <... futex resumed>) = 0 [pid 10648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10647] <... close resumed>) = 0 [pid 10646] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10648] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10647] mkdir("./file1", 0777 [pid 10648] <... mount resumed>) = 0 [pid 10648] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10646] <... futex resumed>) = 0 [pid 10648] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10646] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10646] <... futex resumed>) = 0 [pid 10648] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10646] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10648] <... open resumed>) = 3 [pid 10648] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10647] <... mkdir resumed>) = 0 [pid 10648] <... futex resumed>) = 1 [pid 10646] <... futex resumed>) = 0 [pid 10648] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10646] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10647] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10646] <... futex resumed>) = 0 [pid 10648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10646] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10647] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10647] ioctl(4, LOOP_CLR_FD) = 0 [pid 10647] close(4) = 0 [pid 10647] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10647] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10648] <... write resumed>) = 262144 [pid 10648] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10646] <... futex resumed>) = 0 [pid 10646] exit_group(0) = ? [pid 10647] <... futex resumed>) = ? [pid 10647] +++ exited with 0 +++ [pid 10648] <... futex resumed>) = ? [pid 10648] +++ exited with 0 +++ [pid 10646] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10646, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1214", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1214/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1214/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 274.015912][T10647] loop0: detected capacity change from 0 to 512 [ 274.031541][T10647] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1214/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1214/bus") = 0 [pid 5052] umount2("./1214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1214/binderfs") = 0 [pid 5052] umount2("./1214/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1214/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1214/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1214/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1214/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1214") = 0 [pid 5052] mkdir("./1215", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10649 attached , child_tidptr=0x555556d60690) = 10649 [pid 10649] set_robust_list(0x555556d606a0, 24) = 0 [pid 10649] chdir("./1215") = 0 [pid 10649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10649] setpgid(0, 0) = 0 [pid 10649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10649] write(3, "1000", 4) = 4 [pid 10649] close(3) = 0 [pid 10649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10649] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10649] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10649] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10650]}, 88) = 10650 [pid 10649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10649] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10649] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 ./strace-static-x86_64: Process 10650 attached [pid 10649] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10650] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10650] set_robust_list(0x7f55300e29a0, 24 [pid 10649] <... mprotect resumed>) = 0 [pid 10650] <... set_robust_list resumed>) = 0 [pid 10650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10650] memfd_create("syzkaller", 0 [pid 10649] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10650] <... memfd_create resumed>) = 3 [pid 10650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10649] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10650] <... mmap resumed>) = 0x7f5527ca1000 [pid 10649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10651 attached [pid 10651] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10649] <... clone3 resumed> => {parent_tid=[10651]}, 88) = 10651 [pid 10651] set_robust_list(0x7f55300c19a0, 24 [pid 10649] rt_sigprocmask(SIG_SETMASK, [], [pid 10651] <... set_robust_list resumed>) = 0 [pid 10649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10651] rt_sigprocmask(SIG_SETMASK, [], [pid 10650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10649] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10649] <... futex resumed>) = 0 [pid 10649] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10651] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10651] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10649] <... futex resumed>) = 0 [pid 10651] <... futex resumed>) = 1 [pid 10649] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10651] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10649] <... futex resumed>) = 0 [pid 10651] <... mount resumed>) = 0 [pid 10649] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10651] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10649] <... futex resumed>) = 0 [pid 10649] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10651] <... futex resumed>) = 1 [pid 10649] <... futex resumed>) = 0 [pid 10651] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10650] <... write resumed>) = 262144 [pid 10649] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10651] <... open resumed>) = 5 [pid 10651] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10649] <... futex resumed>) = 0 [pid 10651] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10649] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10651] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10649] <... futex resumed>) = 0 [pid 10649] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10651] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10651] <... futex resumed>) = 0 [pid 10651] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10650] munmap(0x7f5527ca1000, 262144) = 0 [pid 10650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10650] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10650] close(3) = 0 [pid 10650] mkdir("./file1", 0777) = 0 [pid 10650] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10650] ioctl(6, LOOP_CLR_FD) = 0 [pid 10650] close(6) = 0 [pid 10650] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10650] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10649] exit_group(0) = ? [pid 10651] <... futex resumed>) = ? [pid 10651] +++ exited with 0 +++ [pid 10650] <... futex resumed>) = ? [pid 10650] +++ exited with 0 +++ [pid 10649] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10649, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1215", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1215/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1215/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1215/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1215/bus") = 0 [pid 5052] umount2("./1215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1215/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1215/binderfs") = 0 [pid 5052] umount2("./1215/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1215/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1215/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1215/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1215/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1215") = 0 [pid 5052] mkdir("./1216", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 274.159101][T10650] loop0: detected capacity change from 0 to 512 [ 274.172853][T10650] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10652 ./strace-static-x86_64: Process 10652 attached [pid 10652] set_robust_list(0x555556d606a0, 24) = 0 [pid 10652] chdir("./1216") = 0 [pid 10652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10652] setpgid(0, 0) = 0 [pid 10652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10652] write(3, "1000", 4) = 4 [pid 10652] close(3) = 0 [pid 10652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10652] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10652] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10652] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10652] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10652] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10653]}, 88) = 10653 [pid 10652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10652] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10652] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 ./strace-static-x86_64: Process 10653 attached [pid 10652] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10653] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10653] set_robust_list(0x7f55300e29a0, 24 [pid 10652] <... mprotect resumed>) = 0 [pid 10653] <... set_robust_list resumed>) = 0 [pid 10653] rt_sigprocmask(SIG_SETMASK, [], [pid 10652] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10652] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10653] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 10654 attached [pid 10653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10654] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10652] <... clone3 resumed> => {parent_tid=[10654]}, 88) = 10654 [pid 10654] <... rseq resumed>) = 0 [pid 10653] <... mmap resumed>) = 0x7f5527ca1000 [pid 10652] rt_sigprocmask(SIG_SETMASK, [], [pid 10654] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10654] rt_sigprocmask(SIG_SETMASK, [], [pid 10652] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10654] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10652] <... futex resumed>) = 0 [pid 10654] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10652] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10654] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10652] <... futex resumed>) = 0 [pid 10652] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10654] <... futex resumed>) = 1 [pid 10652] <... futex resumed>) = 0 [pid 10654] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10652] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10654] <... mount resumed>) = 0 [pid 10654] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10652] <... futex resumed>) = 0 [pid 10652] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10652] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10654] <... futex resumed>) = 1 [pid 10654] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10654] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10652] <... futex resumed>) = 0 [pid 10652] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10654] <... futex resumed>) = 1 [pid 10652] <... futex resumed>) = 0 [pid 10654] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10652] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10654] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10652] <... futex resumed>) = 0 [pid 10654] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10653] <... write resumed>) = 262144 [pid 10653] munmap(0x7f5527ca1000, 262144) = 0 [pid 10653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10653] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10653] close(3) = 0 [pid 10653] mkdir("./file1", 0777) = 0 [pid 10653] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10653] ioctl(6, LOOP_CLR_FD) = 0 [pid 10653] close(6) = 0 [pid 10653] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10653] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10652] exit_group(0 [pid 10654] <... futex resumed>) = ? [pid 10654] +++ exited with 0 +++ [pid 10653] <... futex resumed>) = ? [pid 10652] <... exit_group resumed>) = ? [pid 10653] +++ exited with 0 +++ [pid 10652] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10652, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1216", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1216/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1216/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1216/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1216/bus") = 0 [pid 5052] umount2("./1216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1216/binderfs") = 0 [pid 5052] umount2("./1216/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1216/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1216/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1216/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1216/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1216") = 0 [pid 5052] mkdir("./1217", 0777) = 0 [ 274.275230][T10653] loop0: detected capacity change from 0 to 512 [ 274.285318][T10653] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10655 attached , child_tidptr=0x555556d60690) = 10655 [pid 10655] set_robust_list(0x555556d606a0, 24) = 0 [pid 10655] chdir("./1217") = 0 [pid 10655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10655] setpgid(0, 0) = 0 [pid 10655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10655] write(3, "1000", 4) = 4 [pid 10655] close(3) = 0 [pid 10655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10655] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10655] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10655] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10655] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10655] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10656]}, 88) = 10656 [pid 10655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10655] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10655] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10655] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10655] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10657 attached [pid 10657] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10655] <... clone3 resumed> => {parent_tid=[10657]}, 88) = 10657 [pid 10655] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10656 attached [pid 10657] <... rseq resumed>) = 0 [pid 10655] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10657] set_robust_list(0x7f55300c19a0, 24 [pid 10656] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10655] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10657] <... set_robust_list resumed>) = 0 [pid 10656] <... rseq resumed>) = 0 [pid 10657] rt_sigprocmask(SIG_SETMASK, [], [pid 10656] set_robust_list(0x7f55300e29a0, 24 [pid 10655] <... futex resumed>) = 0 [pid 10657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10657] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10656] <... set_robust_list resumed>) = 0 [pid 10657] <... open resumed>) = 3 [pid 10656] rt_sigprocmask(SIG_SETMASK, [], [pid 10655] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10657] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10657] <... futex resumed>) = 1 [pid 10655] <... futex resumed>) = 0 [pid 10657] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10656] memfd_create("syzkaller", 0 [pid 10655] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10656] <... memfd_create resumed>) = 4 [pid 10655] <... futex resumed>) = 0 [pid 10657] <... mount resumed>) = 0 [pid 10656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10655] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10656] <... mmap resumed>) = 0x7f5527ca1000 [pid 10657] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10656] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10657] <... futex resumed>) = 1 [pid 10655] <... futex resumed>) = 0 [pid 10655] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10657] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10655] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10657] <... open resumed>) = 5 [pid 10656] <... write resumed>) = 262144 [pid 10657] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10657] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10656] munmap(0x7f5527ca1000, 262144) = 0 [pid 10655] <... futex resumed>) = 0 [pid 10655] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10657] <... futex resumed>) = 0 [pid 10655] <... futex resumed>) = 1 [pid 10656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10656] ioctl(6, LOOP_SET_FD, 4 [pid 10657] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10655] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10656] <... ioctl resumed>) = 0 [pid 10656] close(4) = 0 [pid 10656] mkdir("./file1", 0777) = 0 [pid 10656] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10657] <... write resumed>) = 262144 [pid 10657] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10656] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10656] ioctl(6, LOOP_CLR_FD) = 0 [pid 10656] close(6) = 0 [pid 10657] <... futex resumed>) = 1 [pid 10655] <... futex resumed>) = 0 [pid 10656] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10657] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10656] <... futex resumed>) = 0 [pid 10655] exit_group(0 [pid 10657] <... futex resumed>) = ? [pid 10657] +++ exited with 0 +++ [pid 10656] +++ exited with 0 +++ [pid 10655] <... exit_group resumed>) = ? [pid 10655] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10655, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1217/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1217/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1217/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1217/bus") = 0 [pid 5052] umount2("./1217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1217/binderfs") = 0 [pid 5052] umount2("./1217/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1217/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1217/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1217/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1217/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1217") = 0 [pid 5052] mkdir("./1218", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10658 attached , child_tidptr=0x555556d60690) = 10658 [pid 10658] set_robust_list(0x555556d606a0, 24) = 0 [pid 10658] chdir("./1218") = 0 [pid 10658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10658] setpgid(0, 0) = 0 [pid 10658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 274.390294][T10656] loop0: detected capacity change from 0 to 512 [ 274.403290][T10656] ext4: Unknown parameter 'nouser_xattr' [pid 10658] write(3, "1000", 4) = 4 [pid 10658] close(3) = 0 [pid 10658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10658] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10658] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10658] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10658] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10659 attached [pid 10659] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10658] <... clone3 resumed> => {parent_tid=[10659]}, 88) = 10659 [pid 10659] <... rseq resumed>) = 0 [pid 10658] rt_sigprocmask(SIG_SETMASK, [], [pid 10659] set_robust_list(0x7f55300e29a0, 24 [pid 10658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10659] <... set_robust_list resumed>) = 0 [pid 10658] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10658] <... futex resumed>) = 0 [pid 10659] memfd_create("syzkaller", 0 [pid 10658] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10658] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10659] <... memfd_create resumed>) = 3 [pid 10658] <... mprotect resumed>) = 0 [pid 10659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10660]}, 88) = 10660 ./strace-static-x86_64: Process 10660 attached [pid 10658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10658] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10658] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10660] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10660] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10660] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10659] <... write resumed>) = 262144 [pid 10659] munmap(0x7f5527ca1000, 262144 [pid 10660] <... open resumed>) = 4 [pid 10659] <... munmap resumed>) = 0 [pid 10660] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10659] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10660] <... futex resumed>) = 1 [pid 10658] <... futex resumed>) = 0 [pid 10660] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10658] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10659] <... openat resumed>) = 5 [pid 10658] <... futex resumed>) = 0 [pid 10659] ioctl(5, LOOP_SET_FD, 3 [pid 10660] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10658] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10660] <... mount resumed>) = 0 [pid 10660] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10658] <... futex resumed>) = 0 [pid 10660] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10658] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10660] <... open resumed>) = 6 [pid 10658] <... futex resumed>) = 0 [pid 10658] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10660] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10658] <... futex resumed>) = 0 [pid 10658] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10658] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10660] <... futex resumed>) = 1 [pid 10660] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10659] <... ioctl resumed>) = 0 [pid 10659] close(3) = 0 [pid 10659] mkdir("./file1", 0777) = 0 [pid 10659] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10660] <... write resumed>) = 262144 [pid 10659] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10660] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10659] ioctl(5, LOOP_CLR_FD [pid 10660] <... futex resumed>) = 1 [pid 10659] <... ioctl resumed>) = 0 [pid 10660] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10659] close(5) = 0 [pid 10659] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10659] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10658] <... futex resumed>) = 0 [pid 10658] exit_group(0 [pid 10660] <... futex resumed>) = ? [pid 10658] <... exit_group resumed>) = ? [pid 10659] <... futex resumed>) = ? [pid 10659] +++ exited with 0 +++ [pid 10660] +++ exited with 0 +++ [pid 10658] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10658, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1218/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1218/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1218/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1218/bus") = 0 [pid 5052] umount2("./1218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1218/binderfs") = 0 [pid 5052] umount2("./1218/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1218/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1218/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 274.489118][T10659] loop0: detected capacity change from 0 to 512 [ 274.500941][T10659] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "./1218/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1218/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1218") = 0 [pid 5052] mkdir("./1219", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10661 ./strace-static-x86_64: Process 10661 attached [pid 10661] set_robust_list(0x555556d606a0, 24) = 0 [pid 10661] chdir("./1219") = 0 [pid 10661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10661] setpgid(0, 0) = 0 [pid 10661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10661] write(3, "1000", 4) = 4 [pid 10661] close(3) = 0 [pid 10661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10661] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10661] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10661] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10661] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10661] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10662 attached [pid 10662] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10661] <... clone3 resumed> => {parent_tid=[10662]}, 88) = 10662 [pid 10662] <... rseq resumed>) = 0 [pid 10661] rt_sigprocmask(SIG_SETMASK, [], [pid 10662] set_robust_list(0x7f55300e29a0, 24 [pid 10661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10662] <... set_robust_list resumed>) = 0 [pid 10662] rt_sigprocmask(SIG_SETMASK, [], [pid 10661] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10661] <... futex resumed>) = 0 [pid 10662] memfd_create("syzkaller", 0 [pid 10661] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10662] <... memfd_create resumed>) = 3 [pid 10661] <... mmap resumed>) = 0x7f55300a1000 [pid 10662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10661] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10662] <... mmap resumed>) = 0x7f5527ca1000 [pid 10661] <... mprotect resumed>) = 0 [pid 10661] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10663]}, 88) = 10663 [pid 10662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10663 attached [pid 10661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10661] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10661] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10663] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10663] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10663] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10663] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10662] <... write resumed>) = 262144 [pid 10663] <... futex resumed>) = 1 [pid 10663] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10662] munmap(0x7f5527ca1000, 262144 [pid 10661] <... futex resumed>) = 0 [pid 10662] <... munmap resumed>) = 0 [pid 10661] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10661] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10662] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10663] <... futex resumed>) = 0 [pid 10663] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10662] <... openat resumed>) = 5 [pid 10663] <... mount resumed>) = 0 [pid 10662] ioctl(5, LOOP_SET_FD, 3 [pid 10663] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10661] <... futex resumed>) = 0 [pid 10663] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10661] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10663] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10661] <... futex resumed>) = 0 [pid 10661] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10663] <... open resumed>) = 6 [pid 10663] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10661] <... futex resumed>) = 0 [pid 10661] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10663] <... futex resumed>) = 1 [pid 10663] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10661] <... futex resumed>) = 0 [pid 10662] <... ioctl resumed>) = 0 [pid 10661] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10662] close(3) = 0 [pid 10662] mkdir("./file1", 0777) = 0 [pid 10662] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10663] <... write resumed>) = 262144 [pid 10662] ioctl(5, LOOP_CLR_FD) = 0 [pid 10663] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10662] close(5) = 0 [pid 10662] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10662] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10663] <... futex resumed>) = 1 [pid 10661] <... futex resumed>) = 0 [pid 10663] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10661] exit_group(0 [pid 10663] <... futex resumed>) = ? [pid 10662] <... futex resumed>) = ? [pid 10661] <... exit_group resumed>) = ? [pid 10663] +++ exited with 0 +++ [pid 10662] +++ exited with 0 +++ [pid 10661] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10661, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1219", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1219/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1219/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1219/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1219/bus") = 0 [pid 5052] umount2("./1219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1219/binderfs") = 0 [pid 5052] umount2("./1219/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1219/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1219/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1219/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1219/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1219") = 0 [pid 5052] mkdir("./1220", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10664 attached , child_tidptr=0x555556d60690) = 10664 [pid 10664] set_robust_list(0x555556d606a0, 24) = 0 [ 274.602946][T10662] loop0: detected capacity change from 0 to 512 [ 274.615977][T10662] ext4: Unknown parameter 'nouser_xattr' [pid 10664] chdir("./1220") = 0 [pid 10664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10664] setpgid(0, 0) = 0 [pid 10664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10664] write(3, "1000", 4) = 4 [pid 10664] close(3) = 0 [pid 10664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10664] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10664] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10664] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10664] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10664] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10664] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10665 attached [pid 10665] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10664] <... clone3 resumed> => {parent_tid=[10665]}, 88) = 10665 [pid 10665] <... rseq resumed>) = 0 [pid 10664] rt_sigprocmask(SIG_SETMASK, [], [pid 10665] set_robust_list(0x7f55300e29a0, 24 [pid 10664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10665] <... set_robust_list resumed>) = 0 [pid 10664] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10665] rt_sigprocmask(SIG_SETMASK, [], [pid 10664] <... futex resumed>) = 0 [pid 10665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10664] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10665] memfd_create("syzkaller", 0 [pid 10664] <... futex resumed>) = 0 [pid 10664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10665] <... memfd_create resumed>) = 3 [pid 10665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10664] <... mmap resumed>) = 0x7f55300a1000 [pid 10664] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10664] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10664] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10666]}, 88) = 10666 [pid 10664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10664] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10666 attached ) = 0 [pid 10664] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10666] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10666] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10666] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10666] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10666] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10664] <... futex resumed>) = 0 [pid 10665] <... write resumed>) = 262144 [pid 10664] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10666] <... futex resumed>) = 0 [pid 10664] <... futex resumed>) = 1 [pid 10666] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10664] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10665] munmap(0x7f5527ca1000, 262144 [pid 10666] <... mount resumed>) = 0 [pid 10666] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10664] <... futex resumed>) = 0 [pid 10666] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10664] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10664] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10665] <... munmap resumed>) = 0 [pid 10665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10665] ioctl(5, LOOP_SET_FD, 3 [pid 10666] <... futex resumed>) = 0 [pid 10666] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10666] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10666] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10664] <... futex resumed>) = 0 [pid 10664] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10666] <... futex resumed>) = 0 [pid 10666] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10664] <... futex resumed>) = 1 [pid 10665] <... ioctl resumed>) = 0 [pid 10664] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10665] close(3) = 0 [pid 10665] mkdir("./file1", 0777) = 0 [pid 10665] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10666] <... write resumed>) = 262144 [pid 10665] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10666] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10665] ioctl(5, LOOP_CLR_FD [pid 10666] <... futex resumed>) = 1 [pid 10664] <... futex resumed>) = 0 [pid 10666] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10665] <... ioctl resumed>) = 0 [pid 10665] close(5) = 0 [pid 10665] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10665] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10664] exit_group(0 [pid 10666] <... futex resumed>) = ? [pid 10665] <... futex resumed>) = ? [pid 10664] <... exit_group resumed>) = ? [pid 10666] +++ exited with 0 +++ [pid 10665] +++ exited with 0 +++ [pid 10664] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10664, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1220", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1220/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1220/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1220/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1220/bus") = 0 [pid 5052] umount2("./1220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1220/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1220/binderfs") = 0 [pid 5052] umount2("./1220/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1220/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1220/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1220/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1220/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1220") = 0 [pid 5052] mkdir("./1221", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 274.693214][T10665] loop0: detected capacity change from 0 to 512 [ 274.714432][T10665] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10667 ./strace-static-x86_64: Process 10667 attached [pid 10667] set_robust_list(0x555556d606a0, 24) = 0 [pid 10667] chdir("./1221") = 0 [pid 10667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10667] setpgid(0, 0) = 0 [pid 10667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10667] write(3, "1000", 4) = 4 [pid 10667] close(3) = 0 [pid 10667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10667] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10667] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10667] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10667] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10668 attached => {parent_tid=[10668]}, 88) = 10668 [pid 10668] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10668] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10667] rt_sigprocmask(SIG_SETMASK, [], [pid 10668] rt_sigprocmask(SIG_SETMASK, [], [pid 10667] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10667] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10668] memfd_create("syzkaller", 0 [pid 10667] <... futex resumed>) = 0 [pid 10667] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10667] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10668] <... memfd_create resumed>) = 3 [pid 10668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10669 attached => {parent_tid=[10669]}, 88) = 10669 [pid 10669] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10669] <... rseq resumed>) = 0 [pid 10669] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10669] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10667] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10669] <... futex resumed>) = 0 [pid 10669] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10668] <... write resumed>) = 262144 [pid 10667] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10669] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10667] <... futex resumed>) = 0 [pid 10667] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10667] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10669] <... futex resumed>) = 1 [pid 10669] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10668] munmap(0x7f5527ca1000, 262144 [pid 10669] <... mount resumed>) = 0 [pid 10669] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10667] <... futex resumed>) = 0 [pid 10667] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10669] <... futex resumed>) = 1 [pid 10668] <... munmap resumed>) = 0 [pid 10667] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10669] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10668] ioctl(5, LOOP_SET_FD, 3 [pid 10669] <... open resumed>) = 6 [pid 10669] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10667] <... futex resumed>) = 0 [pid 10669] <... futex resumed>) = 1 [pid 10667] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10669] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10667] <... futex resumed>) = 0 [pid 10667] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10668] <... ioctl resumed>) = 0 [pid 10668] close(3) = 0 [pid 10668] mkdir("./file1", 0777) = 0 [pid 10668] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10669] <... write resumed>) = 262144 [pid 10669] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10669] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10667] <... futex resumed>) = 0 [pid 10668] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10668] ioctl(5, LOOP_CLR_FD) = 0 [pid 10668] close(5) = 0 [pid 10668] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10668] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10667] exit_group(0 [pid 10669] <... futex resumed>) = ? [pid 10669] +++ exited with 0 +++ [pid 10667] <... exit_group resumed>) = ? [pid 10668] <... futex resumed>) = ? [pid 10668] +++ exited with 0 +++ [pid 10667] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10667, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1221", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1221/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1221/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1221/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1221/bus") = 0 [pid 5052] umount2("./1221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1221/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1221/binderfs") = 0 [pid 5052] umount2("./1221/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1221/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1221/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1221/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 274.824928][T10668] loop0: detected capacity change from 0 to 512 [ 274.838710][T10668] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1221/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1221") = 0 [pid 5052] mkdir("./1222", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10670 attached , child_tidptr=0x555556d60690) = 10670 [pid 10670] set_robust_list(0x555556d606a0, 24) = 0 [pid 10670] chdir("./1222") = 0 [pid 10670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10670] setpgid(0, 0) = 0 [pid 10670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10670] write(3, "1000", 4) = 4 [pid 10670] close(3) = 0 [pid 10670] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10670] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10670] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10670] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10670] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10670] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10671]}, 88) = 10671 ./strace-static-x86_64: Process 10671 attached [pid 10670] rt_sigprocmask(SIG_SETMASK, [], [pid 10671] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10671] <... rseq resumed>) = 0 [pid 10670] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10671] set_robust_list(0x7f55300e29a0, 24 [pid 10670] <... futex resumed>) = 0 [pid 10671] <... set_robust_list resumed>) = 0 [pid 10670] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10671] rt_sigprocmask(SIG_SETMASK, [], [pid 10670] <... futex resumed>) = 0 [pid 10671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10671] memfd_create("syzkaller", 0 [pid 10670] <... mmap resumed>) = 0x7f55300a1000 [pid 10671] <... memfd_create resumed>) = 3 [pid 10670] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10670] <... mprotect resumed>) = 0 [pid 10671] <... mmap resumed>) = 0x7f5527ca1000 [pid 10670] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10672 attached => {parent_tid=[10672]}, 88) = 10672 [pid 10672] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10670] rt_sigprocmask(SIG_SETMASK, [], [pid 10672] <... rseq resumed>) = 0 [pid 10672] set_robust_list(0x7f55300c19a0, 24 [pid 10670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10672] <... set_robust_list resumed>) = 0 [pid 10670] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10672] rt_sigprocmask(SIG_SETMASK, [], [pid 10670] <... futex resumed>) = 0 [pid 10672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10670] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10672] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10671] <... write resumed>) = 262144 [pid 10671] munmap(0x7f5527ca1000, 262144 [pid 10672] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10671] <... munmap resumed>) = 0 [pid 10671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10670] <... futex resumed>) = 0 [pid 10671] ioctl(5, LOOP_SET_FD, 3 [pid 10670] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10670] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10672] <... futex resumed>) = 1 [pid 10672] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10672] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10670] <... futex resumed>) = 0 [pid 10670] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10672] <... futex resumed>) = 1 [pid 10672] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10670] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10672] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10670] <... futex resumed>) = 0 [pid 10670] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10672] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10670] <... futex resumed>) = 0 [pid 10671] <... ioctl resumed>) = 0 [pid 10670] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10671] close(3) = 0 [pid 10671] mkdir("./file1", 0777) = 0 [pid 10671] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10672] <... write resumed>) = 262144 [pid 10672] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10671] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10670] <... futex resumed>) = 0 [pid 10672] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10671] ioctl(5, LOOP_CLR_FD) = 0 [pid 10671] close(5) = 0 [pid 10671] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10671] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10670] exit_group(0 [pid 10672] <... futex resumed>) = ? [pid 10671] <... futex resumed>) = ? [pid 10672] +++ exited with 0 +++ [pid 10671] +++ exited with 0 +++ [pid 10670] <... exit_group resumed>) = ? [pid 10670] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10670, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1222", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1222/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1222/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1222/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1222/bus") = 0 [pid 5052] umount2("./1222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1222/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1222/binderfs") = 0 [pid 5052] umount2("./1222/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1222/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1222/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1222/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 274.935853][T10671] loop0: detected capacity change from 0 to 512 [ 274.948329][T10671] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1222/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1222") = 0 [pid 5052] mkdir("./1223", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10673 ./strace-static-x86_64: Process 10673 attached [pid 10673] set_robust_list(0x555556d606a0, 24) = 0 [pid 10673] chdir("./1223") = 0 [pid 10673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10673] setpgid(0, 0) = 0 [pid 10673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10673] write(3, "1000", 4) = 4 [pid 10673] close(3) = 0 [pid 10673] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10673] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10673] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10673] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10673] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10673] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10674]}, 88) = 10674 [pid 10673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10673] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10673] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10673] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10673] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10674 attached ./strace-static-x86_64: Process 10675 attached [pid 10675] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10674] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10673] <... clone3 resumed> => {parent_tid=[10675]}, 88) = 10675 [pid 10675] <... rseq resumed>) = 0 [pid 10674] <... rseq resumed>) = 0 [pid 10675] set_robust_list(0x7f55300c19a0, 24 [pid 10674] set_robust_list(0x7f55300e29a0, 24 [pid 10673] rt_sigprocmask(SIG_SETMASK, [], [pid 10675] <... set_robust_list resumed>) = 0 [pid 10674] <... set_robust_list resumed>) = 0 [pid 10673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10675] rt_sigprocmask(SIG_SETMASK, [], [pid 10674] rt_sigprocmask(SIG_SETMASK, [], [pid 10673] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10674] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10673] <... futex resumed>) = 0 [pid 10675] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10674] memfd_create("syzkaller", 0 [pid 10673] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10675] <... open resumed>) = 3 [pid 10674] <... memfd_create resumed>) = 4 [pid 10674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10675] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10674] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10675] <... futex resumed>) = 1 [pid 10673] <... futex resumed>) = 0 [pid 10673] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10675] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10673] <... futex resumed>) = 0 [pid 10675] <... mount resumed>) = 0 [pid 10673] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10675] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10673] <... futex resumed>) = 0 [pid 10673] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10673] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10675] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10675] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10673] <... futex resumed>) = 0 [pid 10673] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10675] <... futex resumed>) = 1 [pid 10673] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10675] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10675] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10673] <... futex resumed>) = 0 [pid 10675] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10674] <... write resumed>) = 262144 [pid 10674] munmap(0x7f5527ca1000, 262144) = 0 [pid 10674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10674] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10674] close(4) = 0 [pid 10674] mkdir("./file1", 0777) = 0 [pid 10674] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10674] ioctl(6, LOOP_CLR_FD) = 0 [pid 10674] close(6) = 0 [pid 10674] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10674] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10673] exit_group(0 [pid 10675] <... futex resumed>) = ? [pid 10674] <... futex resumed>) = ? [pid 10673] <... exit_group resumed>) = ? [pid 10674] +++ exited with 0 +++ [pid 10675] +++ exited with 0 +++ [pid 10673] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10673, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1223", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1223/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1223/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1223/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1223/bus") = 0 [pid 5052] umount2("./1223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1223/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1223/binderfs") = 0 [pid 5052] umount2("./1223/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1223/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1223/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1223/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1223/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1223") = 0 [pid 5052] mkdir("./1224", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10676 attached , child_tidptr=0x555556d60690) = 10676 [pid 10676] set_robust_list(0x555556d606a0, 24) = 0 [pid 10676] chdir("./1224") = 0 [pid 10676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10676] setpgid(0, 0) = 0 [pid 10676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10676] write(3, "1000", 4) = 4 [pid 10676] close(3) = 0 [ 275.061551][T10674] loop0: detected capacity change from 0 to 512 [ 275.070127][T10674] ext4: Unknown parameter 'nouser_xattr' [pid 10676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10676] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10676] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10676] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10676] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10677 attached [pid 10677] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10676] <... clone3 resumed> => {parent_tid=[10677]}, 88) = 10677 [pid 10677] <... rseq resumed>) = 0 [pid 10676] rt_sigprocmask(SIG_SETMASK, [], [pid 10677] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10677] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10676] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10676] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10677] <... futex resumed>) = 0 [pid 10677] memfd_create("syzkaller", 0) = 3 [pid 10676] <... futex resumed>) = 1 [pid 10677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10676] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10677] <... mmap resumed>) = 0x7f5527cc2000 [pid 10676] <... futex resumed>) = 0 [pid 10676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5527ca1000 [pid 10676] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0} => {parent_tid=[10678]}, 88) = 10678 [pid 10676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10676] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10676] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10678 attached [pid 10678] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053) = 0 [pid 10677] <... write resumed>) = 262144 [pid 10677] munmap(0x7f5527cc2000, 262144 [pid 10678] set_robust_list(0x7f5527cc19a0, 24) = 0 [pid 10678] rt_sigprocmask(SIG_SETMASK, [], [pid 10677] <... munmap resumed>) = 0 [pid 10677] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10678] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10677] <... openat resumed>) = 4 [pid 10677] ioctl(4, LOOP_SET_FD, 3 [pid 10678] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 10678] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10678] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10676] <... futex resumed>) = 0 [pid 10676] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10678] <... futex resumed>) = 0 [pid 10676] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10678] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10678] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10677] <... ioctl resumed>) = 0 [pid 10678] <... futex resumed>) = 1 [pid 10677] close(3 [pid 10676] <... futex resumed>) = 0 [pid 10678] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10677] <... close resumed>) = 0 [pid 10676] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10677] mkdir("./file1", 0777 [pid 10676] <... futex resumed>) = 0 [pid 10678] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10677] <... mkdir resumed>) = 0 [pid 10678] <... open resumed>) = 3 [pid 10676] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10678] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10676] <... futex resumed>) = 0 [pid 10678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10676] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10677] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10676] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10677] ioctl(4, LOOP_CLR_FD) = 0 [pid 10677] close(4) = 0 [pid 10677] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10677] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10678] <... write resumed>) = 262144 [pid 10678] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10676] <... futex resumed>) = 0 [pid 10676] exit_group(0 [pid 10677] <... futex resumed>) = ? [pid 10676] <... exit_group resumed>) = ? [pid 10677] +++ exited with 0 +++ [pid 10678] +++ exited with 0 +++ [pid 10676] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10676, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] umount2("./1224", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1224/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1224/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1224/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 275.153699][T10677] loop0: detected capacity change from 0 to 512 [ 275.165834][T10677] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1224/bus") = 0 [pid 5052] umount2("./1224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1224/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1224/binderfs") = 0 [pid 5052] umount2("./1224/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1224/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1224/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1224/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1224/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1224") = 0 [pid 5052] mkdir("./1225", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10679 attached , child_tidptr=0x555556d60690) = 10679 [pid 10679] set_robust_list(0x555556d606a0, 24) = 0 [pid 10679] chdir("./1225") = 0 [pid 10679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10679] setpgid(0, 0) = 0 [pid 10679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10679] write(3, "1000", 4) = 4 [pid 10679] close(3) = 0 [pid 10679] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10679] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10679] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10679] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10679] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10679] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10679] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10680]}, 88) = 10680 [pid 10679] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10680 attached NULL, 8) = 0 [pid 10680] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10680] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10679] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10679] <... futex resumed>) = 0 [pid 10679] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10680] memfd_create("syzkaller", 0 [pid 10679] <... mmap resumed>) = 0x7f55300a1000 [pid 10679] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10679] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10679] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10681 attached [pid 10681] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10679] <... clone3 resumed> => {parent_tid=[10681]}, 88) = 10681 [pid 10681] <... rseq resumed>) = 0 [pid 10679] rt_sigprocmask(SIG_SETMASK, [], [pid 10681] set_robust_list(0x7f55300c19a0, 24 [pid 10679] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10681] <... set_robust_list resumed>) = 0 [pid 10679] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10681] rt_sigprocmask(SIG_SETMASK, [], [pid 10680] <... memfd_create resumed>) = 3 [pid 10679] <... futex resumed>) = 0 [pid 10681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10679] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10681] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10680] <... mmap resumed>) = 0x7f5527ca1000 [pid 10681] <... open resumed>) = 4 [pid 10681] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10681] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10679] <... futex resumed>) = 0 [pid 10679] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10681] <... futex resumed>) = 0 [pid 10679] <... futex resumed>) = 1 [pid 10681] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10679] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10681] <... mount resumed>) = 0 [pid 10680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10681] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10679] <... futex resumed>) = 0 [pid 10681] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10679] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10681] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10679] <... futex resumed>) = 0 [pid 10679] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10681] <... open resumed>) = 5 [pid 10681] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10679] <... futex resumed>) = 0 [pid 10681] <... futex resumed>) = 1 [pid 10681] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10679] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10681] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10681] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10679] <... futex resumed>) = 0 [pid 10681] <... futex resumed>) = 0 [pid 10679] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10681] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10680] <... write resumed>) = 262144 [pid 10680] munmap(0x7f5527ca1000, 262144) = 0 [pid 10680] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10680] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10680] close(3) = 0 [pid 10680] mkdir("./file1", 0777) = 0 [pid 10680] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10680] ioctl(6, LOOP_CLR_FD) = 0 [pid 10680] close(6) = 0 [pid 10680] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10679] exit_group(0 [pid 10681] <... futex resumed>) = ? [pid 10680] <... futex resumed>) = ? [pid 10679] <... exit_group resumed>) = ? [pid 10681] +++ exited with 0 +++ [pid 10680] +++ exited with 0 +++ [pid 10679] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10679, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1225", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1225/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1225/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1225/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1225/bus") = 0 [pid 5052] umount2("./1225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1225/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1225/binderfs") = 0 [pid 5052] umount2("./1225/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1225/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1225/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1225/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1225/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1225") = 0 [pid 5052] mkdir("./1226", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 275.275508][T10680] loop0: detected capacity change from 0 to 512 [ 275.285565][T10680] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10682 attached , child_tidptr=0x555556d60690) = 10682 [pid 10682] set_robust_list(0x555556d606a0, 24) = 0 [pid 10682] chdir("./1226") = 0 [pid 10682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10682] setpgid(0, 0) = 0 [pid 10682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10682] write(3, "1000", 4) = 4 [pid 10682] close(3) = 0 [pid 10682] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10682] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10682] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10682] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10682] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10682] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10682] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10683]}, 88) = 10683 [pid 10682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10682] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10682] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10682] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10682] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10682] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10684 attached [pid 10684] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10684] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10682] <... clone3 resumed> => {parent_tid=[10684]}, 88) = 10684 [pid 10684] rt_sigprocmask(SIG_SETMASK, [], [pid 10682] rt_sigprocmask(SIG_SETMASK, [], [pid 10684] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10682] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10684] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10682] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10682] <... futex resumed>) = 0 ./strace-static-x86_64: Process 10683 attached [pid 10684] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10683] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10683] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10683] rt_sigprocmask(SIG_SETMASK, [], [pid 10684] <... open resumed>) = 3 [pid 10683] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10682] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10683] memfd_create("syzkaller", 0 [pid 10684] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10683] <... memfd_create resumed>) = 4 [pid 10682] <... futex resumed>) = 0 [pid 10684] <... futex resumed>) = 1 [pid 10683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10682] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10684] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10682] <... futex resumed>) = 0 [pid 10683] <... mmap resumed>) = 0x7f5527ca1000 [pid 10682] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10684] <... mount resumed>) = 0 [pid 10684] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10683] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10682] <... futex resumed>) = 0 [pid 10684] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10682] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10684] <... open resumed>) = 5 [pid 10682] <... futex resumed>) = 0 [pid 10682] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10684] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10684] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10682] <... futex resumed>) = 0 [pid 10684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10682] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10684] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10682] <... futex resumed>) = 0 [pid 10684] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10682] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10684] <... futex resumed>) = 0 [pid 10682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10684] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10683] <... write resumed>) = 262144 [pid 10683] munmap(0x7f5527ca1000, 262144) = 0 [pid 10683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10683] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10683] close(4) = 0 [pid 10683] mkdir("./file1", 0777) = 0 [pid 10683] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10683] ioctl(6, LOOP_CLR_FD) = 0 [pid 10683] close(6) = 0 [pid 10683] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10683] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10682] exit_group(0) = ? [pid 10683] <... futex resumed>) = ? [pid 10683] +++ exited with 0 +++ [pid 10684] <... futex resumed>) = ? [pid 10684] +++ exited with 0 +++ [pid 10682] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10682, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1226", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1226/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1226/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1226/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1226/bus") = 0 [pid 5052] umount2("./1226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1226/binderfs") = 0 [pid 5052] umount2("./1226/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1226/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1226/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1226/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1226/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1226") = 0 [pid 5052] mkdir("./1227", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 275.383290][T10683] loop0: detected capacity change from 0 to 512 [ 275.392774][T10683] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10685 attached , child_tidptr=0x555556d60690) = 10685 [pid 10685] set_robust_list(0x555556d606a0, 24) = 0 [pid 10685] chdir("./1227") = 0 [pid 10685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10685] setpgid(0, 0) = 0 [pid 10685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10685] write(3, "1000", 4) = 4 [pid 10685] close(3) = 0 [pid 10685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10685] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10685] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10685] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10685] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10685] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10685] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10686 attached [pid 10686] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10686] set_robust_list(0x7f55300e29a0, 24 [pid 10685] <... clone3 resumed> => {parent_tid=[10686]}, 88) = 10686 [pid 10686] <... set_robust_list resumed>) = 0 [pid 10686] rt_sigprocmask(SIG_SETMASK, [], [pid 10685] rt_sigprocmask(SIG_SETMASK, [], [pid 10686] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10686] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10685] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10686] <... futex resumed>) = 0 [pid 10685] <... futex resumed>) = 1 [pid 10686] memfd_create("syzkaller", 0 [pid 10685] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10685] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10686] <... memfd_create resumed>) = 3 [pid 10685] <... mmap resumed>) = 0x7f55300a1000 [pid 10686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10685] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10686] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10685] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10685] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10687 attached [pid 10687] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10685] <... clone3 resumed> => {parent_tid=[10687]}, 88) = 10687 [pid 10685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10685] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10685] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10687] <... rseq resumed>) = 0 [pid 10686] <... write resumed>) = 262144 [pid 10686] munmap(0x7f5527ca1000, 262144) = 0 [pid 10686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10686] ioctl(4, LOOP_SET_FD, 3 [pid 10687] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10686] <... ioctl resumed>) = 0 [pid 10687] rt_sigprocmask(SIG_SETMASK, [], [pid 10686] close(3) = 0 [pid 10686] mkdir("./file1", 0777 [pid 10687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10686] <... mkdir resumed>) = 0 [pid 10686] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10687] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 3 [pid 10687] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10687] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10685] <... futex resumed>) = 0 [pid 10685] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10687] <... futex resumed>) = 0 [pid 10685] <... futex resumed>) = 1 [pid 10687] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10685] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10686] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10686] ioctl(4, LOOP_CLR_FD [pid 10687] <... mount resumed>) = 0 [pid 10687] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10685] <... futex resumed>) = 0 [pid 10687] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10685] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10687] <... futex resumed>) = 0 [pid 10687] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10685] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10687] <... open resumed>) = 5 [pid 10687] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10687] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10685] <... futex resumed>) = 0 [pid 10685] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10687] <... futex resumed>) = 0 [pid 10687] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10685] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10686] <... ioctl resumed>) = 0 [pid 10686] close(4) = 0 [pid 10686] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10686] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10687] <... write resumed>) = 262144 [pid 10687] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10685] <... futex resumed>) = 0 [pid 10685] exit_group(0) = ? [pid 10686] <... futex resumed>) = ? [pid 10687] <... futex resumed>) = ? [pid 10686] +++ exited with 0 +++ [pid 10687] +++ exited with 0 +++ [pid 10685] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10685, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1227", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1227/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1227/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1227/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1227/bus") = 0 [pid 5052] umount2("./1227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1227/binderfs") = 0 [pid 5052] umount2("./1227/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1227/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1227/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1227/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1227/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1227") = 0 [pid 5052] mkdir("./1228", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 275.471620][T10686] loop0: detected capacity change from 0 to 512 [ 275.481918][T10686] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10688 attached , child_tidptr=0x555556d60690) = 10688 [pid 10688] set_robust_list(0x555556d606a0, 24) = 0 [pid 10688] chdir("./1228") = 0 [pid 10688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10688] setpgid(0, 0) = 0 [pid 10688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10688] write(3, "1000", 4) = 4 [pid 10688] close(3) = 0 [pid 10688] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10688] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10688] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10688] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10688] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10688] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10689 attached [pid 10689] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10688] <... clone3 resumed> => {parent_tid=[10689]}, 88) = 10689 [pid 10689] <... rseq resumed>) = 0 [pid 10689] set_robust_list(0x7f55300e29a0, 24 [pid 10688] rt_sigprocmask(SIG_SETMASK, [], [pid 10689] <... set_robust_list resumed>) = 0 [pid 10688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10689] rt_sigprocmask(SIG_SETMASK, [], [pid 10688] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10688] <... futex resumed>) = 0 [pid 10689] memfd_create("syzkaller", 0 [pid 10688] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10689] <... memfd_create resumed>) = 3 [pid 10688] <... mmap resumed>) = 0x7f55300a1000 [pid 10689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10688] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10688] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10690]}, 88) = 10690 [pid 10688] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10688] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10688] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10690 attached [pid 10689] <... write resumed>) = 262144 [pid 10689] munmap(0x7f5527ca1000, 262144) = 0 [pid 10689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10689] ioctl(4, LOOP_SET_FD, 3 [pid 10690] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10690] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10690] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10689] <... ioctl resumed>) = 0 [pid 10689] close(3) = 0 [pid 10689] mkdir("./file1", 0777 [pid 10690] <... open resumed>) = 5 [pid 10690] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10690] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10688] <... futex resumed>) = 0 [pid 10688] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10690] <... futex resumed>) = 0 [pid 10688] <... futex resumed>) = 1 [pid 10690] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10688] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10690] <... mount resumed>) = 0 [pid 10690] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10688] <... futex resumed>) = 0 [pid 10690] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10688] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10688] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10690] <... futex resumed>) = 0 [pid 10689] <... mkdir resumed>) = 0 [pid 10689] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10690] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10690] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10690] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10688] <... futex resumed>) = 0 [pid 10688] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10688] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10690] <... futex resumed>) = 0 [pid 10690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10689] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10689] ioctl(4, LOOP_CLR_FD) = 0 [pid 10689] close(4) = 0 [pid 10689] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10689] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10690] <... write resumed>) = 262144 [pid 10690] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10688] <... futex resumed>) = 0 [pid 10688] exit_group(0 [pid 10690] <... futex resumed>) = ? [pid 10688] <... exit_group resumed>) = ? [pid 10690] +++ exited with 0 +++ [pid 10689] <... futex resumed>) = ? [pid 10689] +++ exited with 0 +++ [pid 10688] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10688, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1228", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1228/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [ 275.558523][T10689] loop0: detected capacity change from 0 to 512 [ 275.572083][T10689] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1228/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1228/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1228/bus") = 0 [pid 5052] umount2("./1228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1228/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1228/binderfs") = 0 [pid 5052] umount2("./1228/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1228/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1228/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1228/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1228/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1228") = 0 [pid 5052] mkdir("./1229", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10691 attached , child_tidptr=0x555556d60690) = 10691 [pid 10691] set_robust_list(0x555556d606a0, 24) = 0 [pid 10691] chdir("./1229") = 0 [pid 10691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10691] setpgid(0, 0) = 0 [pid 10691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10691] write(3, "1000", 4) = 4 [pid 10691] close(3) = 0 [pid 10691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10691] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10691] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10691] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10691] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10691] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10692 attached [pid 10692] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10691] <... clone3 resumed> => {parent_tid=[10692]}, 88) = 10692 [pid 10692] <... rseq resumed>) = 0 [pid 10691] rt_sigprocmask(SIG_SETMASK, [], [pid 10692] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10692] rt_sigprocmask(SIG_SETMASK, [], [pid 10691] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10691] <... futex resumed>) = 0 [pid 10692] memfd_create("syzkaller", 0 [pid 10691] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10692] <... memfd_create resumed>) = 3 [pid 10691] <... mmap resumed>) = 0x7f55300a1000 [pid 10692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10691] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10691] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10693 attached => {parent_tid=[10693]}, 88) = 10693 [pid 10691] rt_sigprocmask(SIG_SETMASK, [], [pid 10692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10693] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10691] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10691] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10693] <... rseq resumed>) = 0 [pid 10693] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10693] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10692] <... write resumed>) = 262144 [pid 10692] munmap(0x7f5527ca1000, 262144 [pid 10693] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10692] <... munmap resumed>) = 0 [pid 10693] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10691] <... futex resumed>) = 0 [pid 10692] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10692] <... openat resumed>) = 5 [pid 10691] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10693] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10692] ioctl(5, LOOP_SET_FD, 3 [pid 10693] <... mount resumed>) = 0 [pid 10691] <... futex resumed>) = 0 [pid 10691] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10693] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10691] <... futex resumed>) = 0 [pid 10693] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10691] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10691] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10693] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10693] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10692] <... ioctl resumed>) = 0 [pid 10691] <... futex resumed>) = 0 [pid 10691] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10693] <... futex resumed>) = 1 [pid 10691] <... futex resumed>) = 0 [pid 10693] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10691] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10692] close(3) = 0 [pid 10692] mkdir("./file1", 0777) = 0 [pid 10692] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10692] ioctl(5, LOOP_CLR_FD) = 0 [pid 10692] close(5) = 0 [pid 10692] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10692] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10693] <... write resumed>) = 262144 [pid 10693] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10691] <... futex resumed>) = 0 [pid 10693] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10691] exit_group(0) = ? [pid 10692] <... futex resumed>) = ? [pid 10693] <... futex resumed>) = ? [pid 10692] +++ exited with 0 +++ [pid 10693] +++ exited with 0 +++ [pid 10691] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10691, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1229", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1229/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1229/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1229/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1229/bus") = 0 [pid 5052] umount2("./1229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1229/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1229/binderfs") = 0 [pid 5052] umount2("./1229/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1229/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1229/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1229/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 275.679522][T10692] loop0: detected capacity change from 0 to 512 [ 275.690501][T10692] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1229/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1229") = 0 [pid 5052] mkdir("./1230", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10694 attached , child_tidptr=0x555556d60690) = 10694 [pid 10694] set_robust_list(0x555556d606a0, 24) = 0 [pid 10694] chdir("./1230") = 0 [pid 10694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10694] setpgid(0, 0) = 0 [pid 10694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10694] write(3, "1000", 4) = 4 [pid 10694] close(3) = 0 [pid 10694] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10694] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10694] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10694] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10694] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10694] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10695 attached => {parent_tid=[10695]}, 88) = 10695 [pid 10694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10694] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10695] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10694] <... futex resumed>) = 0 [pid 10694] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10695] <... rseq resumed>) = 0 [pid 10694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10695] set_robust_list(0x7f55300e29a0, 24 [pid 10694] <... mmap resumed>) = 0x7f55300a1000 [pid 10694] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10695] <... set_robust_list resumed>) = 0 [pid 10694] <... mprotect resumed>) = 0 [pid 10695] rt_sigprocmask(SIG_SETMASK, [], [pid 10694] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10694] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10696 attached [pid 10695] memfd_create("syzkaller", 0 [pid 10694] <... clone3 resumed> => {parent_tid=[10696]}, 88) = 10696 [pid 10696] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10695] <... memfd_create resumed>) = 3 [pid 10694] rt_sigprocmask(SIG_SETMASK, [], [pid 10696] <... rseq resumed>) = 0 [pid 10695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10696] set_robust_list(0x7f55300c19a0, 24 [pid 10694] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10694] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10695] <... mmap resumed>) = 0x7f5527ca1000 [pid 10696] <... set_robust_list resumed>) = 0 [pid 10696] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10696] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10696] <... open resumed>) = 4 [pid 10696] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10696] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10694] <... futex resumed>) = 0 [pid 10694] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10696] <... futex resumed>) = 0 [pid 10694] <... futex resumed>) = 1 [pid 10696] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10694] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10696] <... mount resumed>) = 0 [pid 10695] <... write resumed>) = 262144 [pid 10695] munmap(0x7f5527ca1000, 262144 [pid 10696] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10695] <... munmap resumed>) = 0 [pid 10696] <... futex resumed>) = 1 [pid 10694] <... futex resumed>) = 0 [pid 10696] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10694] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10694] <... futex resumed>) = 0 [pid 10696] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10694] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10696] <... open resumed>) = 5 [pid 10696] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10696] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10694] <... futex resumed>) = 0 [pid 10694] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10696] <... futex resumed>) = 0 [pid 10694] <... futex resumed>) = 1 [pid 10696] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10695] ioctl(6, LOOP_SET_FD, 3 [pid 10694] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10695] <... ioctl resumed>) = 0 [pid 10695] close(3) = 0 [pid 10695] mkdir("./file1", 0777) = 0 [pid 10695] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10695] ioctl(6, LOOP_CLR_FD) = 0 [pid 10695] close(6) = 0 [pid 10695] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10695] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10696] <... write resumed>) = -1 EIO (Input/output error) [pid 10696] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10694] <... futex resumed>) = 0 [pid 10694] exit_group(0 [pid 10695] <... futex resumed>) = ? [pid 10694] <... exit_group resumed>) = ? [pid 10695] +++ exited with 0 +++ [pid 10696] +++ exited with 0 +++ [pid 10694] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10694, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5052] umount2("./1230", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1230/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1230/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1230/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1230/bus") = 0 [pid 5052] umount2("./1230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1230/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1230/binderfs") = 0 [pid 5052] umount2("./1230/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1230/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1230/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1230/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1230/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1230") = 0 [pid 5052] mkdir("./1231", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10697 attached , child_tidptr=0x555556d60690) = 10697 [pid 10697] set_robust_list(0x555556d606a0, 24) = 0 [pid 10697] chdir("./1231") = 0 [pid 10697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10697] setpgid(0, 0) = 0 [pid 10697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10697] write(3, "1000", 4) = 4 [pid 10697] close(3) = 0 [pid 10697] symlink("/dev/binderfs", "./binderfs") = 0 [ 275.801047][T10695] loop0: detected capacity change from 0 to 512 [ 275.807906][T10696] I/O error, dev loop0, sector 248 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 275.810886][T10695] ext4: Unknown parameter 'nouser_xattr' [ 275.819775][T10696] Buffer I/O error on dev loop0, logical block 31, lost async page write [pid 10697] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10697] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10697] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10697] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10697] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10698 attached => {parent_tid=[10698]}, 88) = 10698 [pid 10698] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10697] rt_sigprocmask(SIG_SETMASK, [], [pid 10698] <... rseq resumed>) = 0 [pid 10698] set_robust_list(0x7f55300e29a0, 24 [pid 10697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10698] <... set_robust_list resumed>) = 0 [pid 10698] rt_sigprocmask(SIG_SETMASK, [], [pid 10697] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10698] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10697] <... futex resumed>) = 0 [pid 10698] memfd_create("syzkaller", 0 [pid 10697] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10698] <... memfd_create resumed>) = 3 [pid 10697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10697] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10697] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10699 attached => {parent_tid=[10699]}, 88) = 10699 [pid 10697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10697] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10697] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10699] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10699] set_robust_list(0x7f55300c19a0, 24 [pid 10698] <... write resumed>) = 262144 [pid 10699] <... set_robust_list resumed>) = 0 [pid 10699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10699] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10698] munmap(0x7f5527ca1000, 262144 [pid 10699] <... open resumed>) = 4 [pid 10699] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10697] <... futex resumed>) = 0 [pid 10699] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10697] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10697] <... futex resumed>) = 0 [pid 10699] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10697] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10699] <... mount resumed>) = 0 [pid 10698] <... munmap resumed>) = 0 [pid 10698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10698] ioctl(5, LOOP_SET_FD, 3 [pid 10699] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10699] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10697] <... futex resumed>) = 0 [pid 10697] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10699] <... futex resumed>) = 0 [pid 10699] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10699] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10699] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10697] <... futex resumed>) = 1 [pid 10697] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10697] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10698] <... ioctl resumed>) = 0 [pid 10699] <... futex resumed>) = 0 [pid 10698] close(3 [pid 10697] <... futex resumed>) = 1 [pid 10699] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10698] <... close resumed>) = 0 [pid 10697] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10698] mkdir("./file1", 0777) = 0 [pid 10698] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10698] ioctl(5, LOOP_CLR_FD) = 0 [pid 10698] close(5) = 0 [pid 10698] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10698] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10699] <... write resumed>) = 262144 [pid 10699] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10697] <... futex resumed>) = 0 [pid 10697] exit_group(0 [pid 10698] <... futex resumed>) = ? [pid 10697] <... exit_group resumed>) = ? [pid 10698] +++ exited with 0 +++ [pid 10699] +++ exited with 0 +++ [pid 10697] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10697, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1231", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1231/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1231/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1231/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1231/bus") = 0 [pid 5052] umount2("./1231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1231/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1231/binderfs") = 0 [pid 5052] umount2("./1231/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1231/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1231/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1231/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1231/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1231") = 0 [pid 5052] mkdir("./1232", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 275.919336][T10698] loop0: detected capacity change from 0 to 512 [ 275.928635][T10698] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10700 attached , child_tidptr=0x555556d60690) = 10700 [pid 10700] set_robust_list(0x555556d606a0, 24) = 0 [pid 10700] chdir("./1232") = 0 [pid 10700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10700] setpgid(0, 0) = 0 [pid 10700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10700] write(3, "1000", 4) = 4 [pid 10700] close(3) = 0 [pid 10700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10700] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10700] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10700] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10700] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10701 attached [pid 10701] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10700] <... clone3 resumed> => {parent_tid=[10701]}, 88) = 10701 [pid 10701] set_robust_list(0x7f55300e29a0, 24 [pid 10700] rt_sigprocmask(SIG_SETMASK, [], [pid 10701] <... set_robust_list resumed>) = 0 [pid 10700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10701] rt_sigprocmask(SIG_SETMASK, [], [pid 10700] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10700] <... futex resumed>) = 0 [pid 10701] memfd_create("syzkaller", 0 [pid 10700] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10701] <... memfd_create resumed>) = 3 [pid 10700] <... mmap resumed>) = 0x7f55300a1000 [pid 10701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10700] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10702 attached => {parent_tid=[10702]}, 88) = 10702 [pid 10700] rt_sigprocmask(SIG_SETMASK, [], [pid 10701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10700] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10700] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10702] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10702] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10702] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10701] <... write resumed>) = 262144 [pid 10701] munmap(0x7f5527ca1000, 262144 [pid 10702] <... open resumed>) = 4 [pid 10702] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10702] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10700] <... futex resumed>) = 0 [pid 10700] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10700] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10702] <... futex resumed>) = 0 [pid 10701] <... munmap resumed>) = 0 [pid 10702] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10701] ioctl(5, LOOP_SET_FD, 3 [pid 10702] <... mount resumed>) = 0 [pid 10701] <... ioctl resumed>) = 0 [pid 10701] close(3) = 0 [pid 10701] mkdir("./file1", 0777 [pid 10702] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10701] <... mkdir resumed>) = 0 [pid 10701] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10702] <... futex resumed>) = 1 [pid 10700] <... futex resumed>) = 0 [pid 10702] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10700] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10702] <... futex resumed>) = 0 [pid 10700] <... futex resumed>) = 1 [pid 10702] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10700] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10702] <... open resumed>) = 3 [pid 10702] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10701] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10702] <... futex resumed>) = 1 [pid 10700] <... futex resumed>) = 0 [pid 10702] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10701] ioctl(5, LOOP_CLR_FD [pid 10700] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10701] <... ioctl resumed>) = 0 [pid 10700] <... futex resumed>) = 0 [pid 10702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10701] close(5 [pid 10700] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10701] <... close resumed>) = 0 [pid 10701] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10701] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10702] <... write resumed>) = 262144 [pid 10702] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10700] <... futex resumed>) = 0 [pid 10700] exit_group(0 [pid 10701] <... futex resumed>) = ? [pid 10700] <... exit_group resumed>) = ? [pid 10701] +++ exited with 0 +++ [ 276.011038][T10701] loop0: detected capacity change from 0 to 512 [ 276.021423][T10701] ext4: Unknown parameter 'nouser_xattr' [pid 10702] +++ exited with 0 +++ [pid 10700] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10700, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1232", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1232/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1232/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1232/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1232/bus") = 0 [pid 5052] umount2("./1232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1232/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1232/binderfs") = 0 [pid 5052] umount2("./1232/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1232/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1232/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1232/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1232/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1232") = 0 [pid 5052] mkdir("./1233", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10703 attached , child_tidptr=0x555556d60690) = 10703 [pid 10703] set_robust_list(0x555556d606a0, 24) = 0 [pid 10703] chdir("./1233") = 0 [pid 10703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10703] setpgid(0, 0) = 0 [pid 10703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10703] write(3, "1000", 4) = 4 [pid 10703] close(3) = 0 [pid 10703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10703] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10703] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10703] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10703] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10703] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10704]}, 88) = 10704 [pid 10703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10703] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10703] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 ./strace-static-x86_64: Process 10704 attached [pid 10704] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10703] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10704] <... rseq resumed>) = 0 [pid 10704] set_robust_list(0x7f55300e29a0, 24 [pid 10703] <... mprotect resumed>) = 0 [pid 10704] <... set_robust_list resumed>) = 0 [pid 10704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10703] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10704] memfd_create("syzkaller", 0 [pid 10703] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10704] <... memfd_create resumed>) = 3 [pid 10703] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 10705 attached ) = 0x7f5527ca1000 [pid 10703] <... clone3 resumed> => {parent_tid=[10705]}, 88) = 10705 [pid 10705] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10703] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10703] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10705] <... rseq resumed>) = 0 [pid 10704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10705] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10705] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10705] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10703] <... futex resumed>) = 0 [pid 10703] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10705] <... futex resumed>) = 1 [pid 10704] <... write resumed>) = 262144 [pid 10703] <... futex resumed>) = 0 [pid 10705] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10703] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10705] <... mount resumed>) = 0 [pid 10705] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10703] <... futex resumed>) = 0 [pid 10705] <... futex resumed>) = 1 [pid 10703] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10705] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10703] <... futex resumed>) = 0 [pid 10705] <... open resumed>) = 5 [pid 10703] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10705] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10704] munmap(0x7f5527ca1000, 262144 [pid 10705] <... futex resumed>) = 1 [pid 10703] <... futex resumed>) = 0 [pid 10705] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10703] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10704] <... munmap resumed>) = 0 [pid 10703] <... futex resumed>) = 0 [pid 10705] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10703] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10705] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10705] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10703] <... futex resumed>) = 0 [pid 10705] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10704] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10704] close(3) = 0 [pid 10704] mkdir("./file1", 0777) = 0 [pid 10704] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10704] ioctl(6, LOOP_CLR_FD) = 0 [pid 10704] close(6) = 0 [pid 10704] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10703] exit_group(0 [pid 10704] <... futex resumed>) = 0 [pid 10704] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10705] <... futex resumed>) = ? [pid 10704] <... futex resumed>) = ? [pid 10703] <... exit_group resumed>) = ? [pid 10704] +++ exited with 0 +++ [pid 10705] +++ exited with 0 +++ [pid 10703] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10703, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1233", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1233/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1233/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1233/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1233/bus") = 0 [pid 5052] umount2("./1233/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1233/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1233/binderfs") = 0 [pid 5052] umount2("./1233/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1233/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1233/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1233/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1233/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1233") = 0 [pid 5052] mkdir("./1234", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 276.158960][T10704] loop0: detected capacity change from 0 to 512 [ 276.171274][T10704] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10706 ./strace-static-x86_64: Process 10706 attached [pid 10706] set_robust_list(0x555556d606a0, 24) = 0 [pid 10706] chdir("./1234") = 0 [pid 10706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10706] setpgid(0, 0) = 0 [pid 10706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10706] write(3, "1000", 4) = 4 [pid 10706] close(3) = 0 [pid 10706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10706] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10706] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10706] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10707 attached => {parent_tid=[10707]}, 88) = 10707 [pid 10707] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10706] rt_sigprocmask(SIG_SETMASK, [], [pid 10707] <... rseq resumed>) = 0 [pid 10707] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10707] rt_sigprocmask(SIG_SETMASK, [], [pid 10706] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10706] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10706] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10706] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10708 attached [pid 10708] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10706] <... clone3 resumed> => {parent_tid=[10708]}, 88) = 10708 [pid 10708] set_robust_list(0x7f55300c19a0, 24 [pid 10706] rt_sigprocmask(SIG_SETMASK, [], [pid 10708] <... set_robust_list resumed>) = 0 [pid 10706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10707] memfd_create("syzkaller", 0 [pid 10706] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10707] <... memfd_create resumed>) = 3 [pid 10707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10708] rt_sigprocmask(SIG_SETMASK, [], [pid 10707] <... mmap resumed>) = 0x7f5527ca1000 [pid 10706] <... futex resumed>) = 0 [pid 10708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10706] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10708] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10708] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10706] <... futex resumed>) = 0 [pid 10706] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10706] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10708] <... futex resumed>) = 1 [pid 10708] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10708] <... mount resumed>) = 0 [pid 10708] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10706] <... futex resumed>) = 0 [pid 10708] <... futex resumed>) = 1 [pid 10706] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10708] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10706] <... futex resumed>) = 0 [pid 10706] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10708] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10706] <... futex resumed>) = 0 [pid 10708] <... futex resumed>) = 1 [pid 10706] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10708] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10706] <... futex resumed>) = 0 [pid 10708] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10706] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10708] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10708] <... futex resumed>) = 0 [pid 10708] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10707] <... write resumed>) = 262144 [pid 10707] munmap(0x7f5527ca1000, 262144) = 0 [pid 10707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10707] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10707] close(3) = 0 [pid 10707] mkdir("./file1", 0777) = 0 [pid 10707] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10707] ioctl(6, LOOP_CLR_FD) = 0 [pid 10707] close(6) = 0 [pid 10707] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10707] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10706] exit_group(0 [pid 10708] <... futex resumed>) = ? [pid 10708] +++ exited with 0 +++ [pid 10707] <... futex resumed>) = ? [pid 10706] <... exit_group resumed>) = ? [pid 10707] +++ exited with 0 +++ [pid 10706] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10706, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1234", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1234/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1234/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1234/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1234/bus") = 0 [pid 5052] umount2("./1234/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1234/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1234/binderfs") = 0 [pid 5052] umount2("./1234/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1234/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1234/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1234/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1234/file1") = 0 [ 276.268020][T10707] loop0: detected capacity change from 0 to 512 [ 276.278183][T10707] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1234") = 0 [pid 5052] mkdir("./1235", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10709 attached , child_tidptr=0x555556d60690) = 10709 [pid 10709] set_robust_list(0x555556d606a0, 24) = 0 [pid 10709] chdir("./1235") = 0 [pid 10709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10709] setpgid(0, 0) = 0 [pid 10709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10709] write(3, "1000", 4) = 4 [pid 10709] close(3) = 0 [pid 10709] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10709] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10709] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10709] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10709] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10709] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10709] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10710 attached => {parent_tid=[10710]}, 88) = 10710 [pid 10710] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10709] rt_sigprocmask(SIG_SETMASK, [], [pid 10710] <... rseq resumed>) = 0 [pid 10710] set_robust_list(0x7f55300e29a0, 24 [pid 10709] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10710] <... set_robust_list resumed>) = 0 [pid 10709] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10710] rt_sigprocmask(SIG_SETMASK, [], [pid 10709] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10710] memfd_create("syzkaller", 0 [pid 10709] <... futex resumed>) = 0 [pid 10709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10710] <... memfd_create resumed>) = 3 [pid 10709] <... mmap resumed>) = 0x7f55300a1000 [pid 10710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10709] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10709] <... mprotect resumed>) = 0 [pid 10709] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10709] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10711 attached [pid 10711] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10709] <... clone3 resumed> => {parent_tid=[10711]}, 88) = 10711 [pid 10711] <... rseq resumed>) = 0 [pid 10711] set_robust_list(0x7f55300c19a0, 24 [pid 10709] rt_sigprocmask(SIG_SETMASK, [], [pid 10711] <... set_robust_list resumed>) = 0 [pid 10709] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10711] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10709] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10709] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10711] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10710] <... write resumed>) = 262144 [pid 10710] munmap(0x7f5527ca1000, 262144 [pid 10711] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10710] <... munmap resumed>) = 0 [pid 10709] <... futex resumed>) = 0 [pid 10711] <... futex resumed>) = 1 [pid 10710] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10710] ioctl(5, LOOP_SET_FD, 3 [pid 10711] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10709] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10711] <... mount resumed>) = 0 [pid 10709] <... futex resumed>) = 0 [pid 10709] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10711] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10709] <... futex resumed>) = 0 [pid 10709] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10709] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10711] <... futex resumed>) = 1 [pid 10711] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10711] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10709] <... futex resumed>) = 0 [pid 10709] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10709] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10711] <... futex resumed>) = 1 [pid 10711] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10710] <... ioctl resumed>) = 0 [pid 10710] close(3) = 0 [pid 10710] mkdir("./file1", 0777) = 0 [pid 10710] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10711] <... write resumed>) = 262144 [pid 10711] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10710] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10711] <... futex resumed>) = 1 [pid 10710] ioctl(5, LOOP_CLR_FD [pid 10709] <... futex resumed>) = 0 [pid 10711] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10710] <... ioctl resumed>) = 0 [pid 10710] close(5) = 0 [pid 10710] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10710] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10709] exit_group(0) = ? [pid 10711] <... futex resumed>) = ? [pid 10710] <... futex resumed>) = ? [pid 10711] +++ exited with 0 +++ [pid 10710] +++ exited with 0 +++ [pid 10709] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10709, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1235", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1235/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1235/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1235/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1235/bus") = 0 [pid 5052] umount2("./1235/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1235/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1235/binderfs") = 0 [pid 5052] umount2("./1235/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1235/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1235/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1235/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 276.384090][T10710] loop0: detected capacity change from 0 to 512 [ 276.396979][T10710] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1235/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1235") = 0 [pid 5052] mkdir("./1236", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10712 attached , child_tidptr=0x555556d60690) = 10712 [pid 10712] set_robust_list(0x555556d606a0, 24) = 0 [pid 10712] chdir("./1236") = 0 [pid 10712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10712] setpgid(0, 0) = 0 [pid 10712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10712] write(3, "1000", 4) = 4 [pid 10712] close(3) = 0 [pid 10712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10712] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10712] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10712] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10712] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10712] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10712] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10713]}, 88) = 10713 ./strace-static-x86_64: Process 10713 attached [pid 10712] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10712] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10712] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10713] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10712] <... futex resumed>) = 0 [pid 10712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10713] <... rseq resumed>) = 0 [pid 10713] set_robust_list(0x7f55300e29a0, 24 [pid 10712] <... mmap resumed>) = 0x7f55300a1000 [pid 10713] <... set_robust_list resumed>) = 0 [pid 10713] rt_sigprocmask(SIG_SETMASK, [], [pid 10712] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10712] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10712] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10713] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 10714 attached [pid 10712] <... clone3 resumed> => {parent_tid=[10714]}, 88) = 10714 [pid 10714] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10713] memfd_create("syzkaller", 0 [pid 10712] rt_sigprocmask(SIG_SETMASK, [], [pid 10714] <... rseq resumed>) = 0 [pid 10713] <... memfd_create resumed>) = 3 [pid 10712] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10712] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10714] set_robust_list(0x7f55300c19a0, 24 [pid 10712] <... futex resumed>) = 0 [pid 10714] <... set_robust_list resumed>) = 0 [pid 10713] <... mmap resumed>) = 0x7f5527ca1000 [pid 10714] rt_sigprocmask(SIG_SETMASK, [], [pid 10712] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10714] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10714] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10712] <... futex resumed>) = 0 [pid 10712] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10712] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10714] <... futex resumed>) = 1 [pid 10714] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10713] <... write resumed>) = 262144 [pid 10714] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10712] <... futex resumed>) = 0 [pid 10712] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10712] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10714] <... futex resumed>) = 1 [pid 10714] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10714] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10712] <... futex resumed>) = 0 [pid 10712] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10714] <... futex resumed>) = 1 [pid 10712] <... futex resumed>) = 0 [pid 10714] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10712] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10714] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10714] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10712] <... futex resumed>) = 0 [pid 10714] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10713] munmap(0x7f5527ca1000, 262144) = 0 [pid 10713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10713] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10713] close(3) = 0 [pid 10713] mkdir("./file1", 0777) = 0 [pid 10713] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10713] ioctl(6, LOOP_CLR_FD) = 0 [pid 10713] close(6) = 0 [pid 10713] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10713] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10712] exit_group(0 [pid 10713] <... futex resumed>) = ? [pid 10712] <... exit_group resumed>) = ? [pid 10714] <... futex resumed>) = ? [pid 10713] +++ exited with 0 +++ [pid 10714] +++ exited with 0 +++ [pid 10712] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10712, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1236", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1236/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1236/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1236/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1236/bus") = 0 [pid 5052] umount2("./1236/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1236/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1236/binderfs") = 0 [pid 5052] umount2("./1236/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1236/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1236/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1236/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1236/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1236") = 0 [pid 5052] mkdir("./1237", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10715 attached , child_tidptr=0x555556d60690) = 10715 [ 276.502488][T10713] loop0: detected capacity change from 0 to 512 [ 276.511485][T10713] ext4: Unknown parameter 'nouser_xattr' [pid 10715] set_robust_list(0x555556d606a0, 24) = 0 [pid 10715] chdir("./1237") = 0 [pid 10715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10715] setpgid(0, 0) = 0 [pid 10715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10715] write(3, "1000", 4) = 4 [pid 10715] close(3) = 0 [pid 10715] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10715] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10715] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10715] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10715] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10715] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10716]}, 88) = 10716 [pid 10715] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10715] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10715] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10715] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10715] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10716 attached ./strace-static-x86_64: Process 10717 attached [pid 10716] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10717] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10716] <... rseq resumed>) = 0 [pid 10715] <... clone3 resumed> => {parent_tid=[10717]}, 88) = 10717 [pid 10716] set_robust_list(0x7f55300e29a0, 24 [pid 10717] <... rseq resumed>) = 0 [pid 10716] <... set_robust_list resumed>) = 0 [pid 10715] rt_sigprocmask(SIG_SETMASK, [], [pid 10716] rt_sigprocmask(SIG_SETMASK, [], [pid 10717] set_robust_list(0x7f55300c19a0, 24 [pid 10716] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10717] <... set_robust_list resumed>) = 0 [pid 10715] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10717] rt_sigprocmask(SIG_SETMASK, [], [pid 10716] memfd_create("syzkaller", 0 [pid 10715] <... futex resumed>) = 0 [pid 10717] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10717] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10715] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10716] <... memfd_create resumed>) = 3 [pid 10717] <... open resumed>) = 4 [pid 10716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10717] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10715] <... futex resumed>) = 0 [pid 10715] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10717] <... futex resumed>) = 1 [pid 10717] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10715] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10717] <... mount resumed>) = 0 [pid 10716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10717] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10715] <... futex resumed>) = 0 [pid 10715] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10717] <... futex resumed>) = 1 [pid 10716] <... write resumed>) = 262144 [pid 10717] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10716] munmap(0x7f5527ca1000, 262144 [pid 10715] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10716] <... munmap resumed>) = 0 [pid 10717] <... open resumed>) = 5 [pid 10717] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10715] <... futex resumed>) = 0 [pid 10717] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10715] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10717] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10715] <... futex resumed>) = 0 [pid 10717] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10715] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10717] <... futex resumed>) = 0 [pid 10716] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10717] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10716] <... openat resumed>) = 6 [pid 10716] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10716] close(3) = 0 [pid 10716] mkdir("./file1", 0777) = 0 [pid 10716] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10716] ioctl(6, LOOP_CLR_FD) = 0 [pid 10716] close(6) = 0 [pid 10716] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10715] exit_group(0 [pid 10717] <... futex resumed>) = ? [pid 10715] <... exit_group resumed>) = ? [pid 10717] +++ exited with 0 +++ [pid 10716] <... futex resumed>) = ? [pid 10716] +++ exited with 0 +++ [pid 10715] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10715, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1237", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1237/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1237/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1237/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1237/bus") = 0 [pid 5052] umount2("./1237/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1237/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1237/binderfs") = 0 [ 276.616978][T10716] loop0: detected capacity change from 0 to 512 [ 276.633583][T10716] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1237/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1237/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1237/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1237/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1237/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1237") = 0 [pid 5052] mkdir("./1238", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10718 attached , child_tidptr=0x555556d60690) = 10718 [pid 10718] set_robust_list(0x555556d606a0, 24) = 0 [pid 10718] chdir("./1238") = 0 [pid 10718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10718] setpgid(0, 0) = 0 [pid 10718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10718] write(3, "1000", 4) = 4 [pid 10718] close(3) = 0 [pid 10718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10718] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10718] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10718] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10718] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10719 attached => {parent_tid=[10719]}, 88) = 10719 [pid 10718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10718] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10718] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10719] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10719] set_robust_list(0x7f55300e29a0, 24 [pid 10718] <... futex resumed>) = 0 [pid 10718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10719] <... set_robust_list resumed>) = 0 [pid 10718] <... mmap resumed>) = 0x7f55300a1000 [pid 10718] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10719] memfd_create("syzkaller", 0 [pid 10718] <... mprotect resumed>) = 0 [pid 10719] <... memfd_create resumed>) = 3 [pid 10719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10720 attached [pid 10720] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10720] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10720] rt_sigprocmask(SIG_SETMASK, [], [pid 10719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10718] <... clone3 resumed> => {parent_tid=[10720]}, 88) = 10720 [pid 10720] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10718] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10720] <... futex resumed>) = 0 [pid 10718] <... futex resumed>) = 1 [pid 10720] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10718] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10719] <... write resumed>) = 262144 [pid 10720] <... open resumed>) = 4 [pid 10719] munmap(0x7f5527ca1000, 262144 [pid 10720] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10718] <... futex resumed>) = 0 [pid 10718] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10720] <... futex resumed>) = 1 [pid 10718] <... futex resumed>) = 0 [pid 10720] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10718] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10720] <... mount resumed>) = 0 [pid 10720] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10718] <... futex resumed>) = 0 [pid 10720] <... futex resumed>) = 1 [pid 10718] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10720] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10719] <... munmap resumed>) = 0 [pid 10718] <... futex resumed>) = 0 [pid 10719] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10718] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10720] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10719] <... openat resumed>) = 6 [pid 10720] <... futex resumed>) = 1 [pid 10718] <... futex resumed>) = 0 [pid 10720] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10718] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10718] <... futex resumed>) = 0 [pid 10720] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10718] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10720] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10720] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10718] <... futex resumed>) = 0 [pid 10720] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10719] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10719] close(3) = 0 [pid 10719] mkdir("./file1", 0777) = 0 [pid 10719] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10719] ioctl(6, LOOP_CLR_FD) = 0 [pid 10719] close(6) = 0 [pid 10719] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10718] exit_group(0 [pid 10719] <... futex resumed>) = 0 [pid 10719] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10718] <... exit_group resumed>) = ? [pid 10719] <... futex resumed>) = ? [pid 10719] +++ exited with 0 +++ [pid 10720] <... futex resumed>) = ? [pid 10720] +++ exited with 0 +++ [pid 10718] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10718, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1238", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1238/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1238/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1238/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1238/bus") = 0 [pid 5052] umount2("./1238/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1238/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1238/binderfs") = 0 [pid 5052] umount2("./1238/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1238/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1238/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1238/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1238/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1238") = 0 [pid 5052] mkdir("./1239", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10721 attached , child_tidptr=0x555556d60690) = 10721 [pid 10721] set_robust_list(0x555556d606a0, 24) = 0 [pid 10721] chdir("./1239") = 0 [pid 10721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10721] setpgid(0, 0) = 0 [pid 10721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10721] write(3, "1000", 4) = 4 [pid 10721] close(3) = 0 [pid 10721] symlink("/dev/binderfs", "./binderfs") = 0 [ 276.742590][T10719] loop0: detected capacity change from 0 to 512 [ 276.752224][T10719] ext4: Unknown parameter 'nouser_xattr' [pid 10721] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10721] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10721] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10721] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10721] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10721] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10721] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10722 attached [pid 10722] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10721] <... clone3 resumed> => {parent_tid=[10722]}, 88) = 10722 [pid 10722] set_robust_list(0x7f55300e29a0, 24 [pid 10721] rt_sigprocmask(SIG_SETMASK, [], [pid 10722] <... set_robust_list resumed>) = 0 [pid 10721] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10721] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10722] memfd_create("syzkaller", 0 [pid 10721] <... futex resumed>) = 0 [pid 10721] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10722] <... memfd_create resumed>) = 3 [pid 10721] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10721] <... mmap resumed>) = 0x7f55300a1000 [pid 10722] <... mmap resumed>) = 0x7f5527ca1000 [pid 10721] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10722] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10721] <... mprotect resumed>) = 0 [pid 10721] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10721] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10723]}, 88) = 10723 [pid 10721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10721] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10721] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10723 attached [pid 10723] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10723] set_robust_list(0x7f55300c19a0, 24 [pid 10722] <... write resumed>) = 262144 [pid 10723] <... set_robust_list resumed>) = 0 [pid 10723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10723] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10722] munmap(0x7f5527ca1000, 262144 [pid 10723] <... open resumed>) = 4 [pid 10723] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10721] <... futex resumed>) = 0 [pid 10723] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10721] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10723] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10723] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10721] <... futex resumed>) = 0 [pid 10722] <... munmap resumed>) = 0 [pid 10721] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10722] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10723] <... mount resumed>) = 0 [pid 10722] <... openat resumed>) = 5 [pid 10722] ioctl(5, LOOP_SET_FD, 3 [pid 10723] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10722] <... ioctl resumed>) = 0 [pid 10722] close(3) = 0 [pid 10722] mkdir("./file1", 0777 [pid 10723] <... futex resumed>) = 1 [pid 10723] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10721] <... futex resumed>) = 0 [pid 10721] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10721] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10723] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10723] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10723] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10721] <... futex resumed>) = 0 [pid 10723] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10721] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10723] <... futex resumed>) = 0 [pid 10721] <... futex resumed>) = 1 [pid 10723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10721] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10722] <... mkdir resumed>) = 0 [pid 10722] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10722] ioctl(5, LOOP_CLR_FD) = 0 [pid 10722] close(5) = 0 [pid 10722] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10722] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10723] <... write resumed>) = 262144 [pid 10723] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10721] <... futex resumed>) = 0 [pid 10721] exit_group(0 [pid 10723] <... futex resumed>) = ? [pid 10722] <... futex resumed>) = ? [pid 10721] <... exit_group resumed>) = ? [pid 10723] +++ exited with 0 +++ [pid 10722] +++ exited with 0 +++ [pid 10721] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10721, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1239", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 276.826413][T10722] loop0: detected capacity change from 0 to 512 [ 276.838569][T10722] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1239/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1239/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1239/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1239/bus") = 0 [pid 5052] umount2("./1239/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1239/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1239/binderfs") = 0 [pid 5052] umount2("./1239/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1239/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1239/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1239/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1239/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1239") = 0 [pid 5052] mkdir("./1240", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10724 attached , child_tidptr=0x555556d60690) = 10724 [pid 10724] set_robust_list(0x555556d606a0, 24) = 0 [pid 10724] chdir("./1240") = 0 [pid 10724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10724] setpgid(0, 0) = 0 [pid 10724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10724] write(3, "1000", 4) = 4 [pid 10724] close(3) = 0 [pid 10724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10724] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10724] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10724] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10724] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10725 attached => {parent_tid=[10725]}, 88) = 10725 [pid 10724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10724] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10725] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10724] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10725] set_robust_list(0x7f55300e29a0, 24 [pid 10724] <... futex resumed>) = 0 [pid 10725] <... set_robust_list resumed>) = 0 [pid 10724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10725] rt_sigprocmask(SIG_SETMASK, [], [pid 10724] <... mmap resumed>) = 0x7f55300a1000 [pid 10724] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10725] memfd_create("syzkaller", 0 [pid 10724] <... mprotect resumed>) = 0 [pid 10725] <... memfd_create resumed>) = 3 [pid 10725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10724] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10725] <... mmap resumed>) = 0x7f5527ca1000 [pid 10724] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10726]}, 88) = 10726 [pid 10724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10724] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10726 attached ) = 0 [pid 10725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10724] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10726] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10726] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10726] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10726] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10726] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10724] <... futex resumed>) = 0 [pid 10724] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10726] <... futex resumed>) = 0 [pid 10726] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10725] <... write resumed>) = 262144 [pid 10724] <... futex resumed>) = 1 [pid 10725] munmap(0x7f5527ca1000, 262144 [pid 10726] <... mount resumed>) = 0 [pid 10725] <... munmap resumed>) = 0 [pid 10724] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10725] ioctl(5, LOOP_SET_FD, 3 [pid 10726] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10724] <... futex resumed>) = 0 [pid 10724] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10724] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10726] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10726] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10724] <... futex resumed>) = 0 [pid 10726] <... futex resumed>) = 1 [pid 10724] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10726] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10724] <... futex resumed>) = 0 [pid 10724] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10725] <... ioctl resumed>) = 0 [pid 10725] close(3) = 0 [pid 10725] mkdir("./file1", 0777) = 0 [pid 10725] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10726] <... write resumed>) = 262144 [pid 10726] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10726] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10724] <... futex resumed>) = 0 [pid 10725] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10725] ioctl(5, LOOP_CLR_FD) = 0 [pid 10725] close(5) = 0 [pid 10725] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10725] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10724] exit_group(0 [pid 10726] <... futex resumed>) = ? [pid 10726] +++ exited with 0 +++ [pid 10725] <... futex resumed>) = ? [pid 10724] <... exit_group resumed>) = ? [pid 10725] +++ exited with 0 +++ [pid 10724] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10724, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1240", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1240/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1240/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1240/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1240/bus") = 0 [pid 5052] umount2("./1240/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1240/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1240/binderfs") = 0 [pid 5052] umount2("./1240/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1240/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1240/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1240/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 276.949457][T10725] loop0: detected capacity change from 0 to 512 [ 276.961665][T10725] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1240/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1240") = 0 [pid 5052] mkdir("./1241", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10727 attached [pid 10727] set_robust_list(0x555556d606a0, 24) = 0 [pid 10727] chdir("./1241") = 0 [pid 10727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10727] setpgid(0, 0 [pid 5052] <... clone resumed>, child_tidptr=0x555556d60690) = 10727 [pid 10727] <... setpgid resumed>) = 0 [pid 10727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10727] write(3, "1000", 4) = 4 [pid 10727] close(3) = 0 [pid 10727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10727] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10727] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10727] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10728 attached [pid 10728] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10727] <... clone3 resumed> => {parent_tid=[10728]}, 88) = 10728 [pid 10728] <... rseq resumed>) = 0 [pid 10728] set_robust_list(0x7f55300e29a0, 24 [pid 10727] rt_sigprocmask(SIG_SETMASK, [], [pid 10728] <... set_robust_list resumed>) = 0 [pid 10727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10728] rt_sigprocmask(SIG_SETMASK, [], [pid 10727] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10728] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10727] <... futex resumed>) = 0 [pid 10728] memfd_create("syzkaller", 0 [pid 10727] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10728] <... memfd_create resumed>) = 3 [pid 10727] <... mmap resumed>) = 0x7f55300a1000 [pid 10728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10727] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10727] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10727] <... clone3 resumed> => {parent_tid=[10729]}, 88) = 10729 ./strace-static-x86_64: Process 10729 attached [pid 10727] rt_sigprocmask(SIG_SETMASK, [], [pid 10729] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10729] <... rseq resumed>) = 0 [pid 10729] set_robust_list(0x7f55300c19a0, 24 [pid 10727] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10729] <... set_robust_list resumed>) = 0 [pid 10729] rt_sigprocmask(SIG_SETMASK, [], [pid 10727] <... futex resumed>) = 0 [pid 10729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10727] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10729] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10729] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10729] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10727] <... futex resumed>) = 0 [pid 10728] <... write resumed>) = 262144 [pid 10727] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10728] munmap(0x7f5527ca1000, 262144 [pid 10727] <... futex resumed>) = 1 [pid 10729] <... futex resumed>) = 0 [pid 10727] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10729] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10728] <... munmap resumed>) = 0 [pid 10728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10728] ioctl(5, LOOP_SET_FD, 3 [pid 10729] <... mount resumed>) = 0 [pid 10729] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10729] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10727] <... futex resumed>) = 0 [pid 10727] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10729] <... futex resumed>) = 0 [pid 10729] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10727] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10729] <... open resumed>) = 6 [pid 10729] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10727] <... futex resumed>) = 0 [pid 10727] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10729] <... futex resumed>) = 1 [pid 10729] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10728] <... ioctl resumed>) = 0 [pid 10727] <... futex resumed>) = 0 [pid 10728] close(3 [pid 10727] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10728] <... close resumed>) = 0 [pid 10728] mkdir("./file1", 0777) = 0 [pid 10728] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10728] ioctl(5, LOOP_CLR_FD) = 0 [pid 10728] close(5 [pid 10729] <... write resumed>) = 262144 [pid 10728] <... close resumed>) = 0 [pid 10728] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10729] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10728] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10729] <... futex resumed>) = 1 [pid 10727] <... futex resumed>) = 0 [pid 10729] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10727] exit_group(0 [pid 10729] <... futex resumed>) = ? [pid 10728] <... futex resumed>) = ? [pid 10729] +++ exited with 0 +++ [pid 10728] +++ exited with 0 +++ [pid 10727] <... exit_group resumed>) = ? [pid 10727] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10727, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1241", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1241/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1241/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1241/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1241/bus") = 0 [pid 5052] umount2("./1241/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1241/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1241/binderfs") = 0 [pid 5052] umount2("./1241/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1241/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1241/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 277.064396][T10728] loop0: detected capacity change from 0 to 512 [ 277.076407][T10728] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "./1241/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1241/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1241") = 0 [pid 5052] mkdir("./1242", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10730 attached , child_tidptr=0x555556d60690) = 10730 [pid 10730] set_robust_list(0x555556d606a0, 24) = 0 [pid 10730] chdir("./1242") = 0 [pid 10730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10730] setpgid(0, 0) = 0 [pid 10730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10730] write(3, "1000", 4) = 4 [pid 10730] close(3) = 0 [pid 10730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10730] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10730] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10730] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10730] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10730] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10730] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10731 attached [pid 10731] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10730] <... clone3 resumed> => {parent_tid=[10731]}, 88) = 10731 [pid 10731] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10730] rt_sigprocmask(SIG_SETMASK, [], [pid 10731] rt_sigprocmask(SIG_SETMASK, [], [pid 10730] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10730] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10730] <... futex resumed>) = 0 [pid 10731] memfd_create("syzkaller", 0 [pid 10730] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10730] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10731] <... memfd_create resumed>) = 3 [pid 10731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10730] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10731] <... mmap resumed>) = 0x7f5527ca1000 [pid 10730] <... mprotect resumed>) = 0 [pid 10730] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10730] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10730] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10732]}, 88) = 10732 [pid 10730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 10732 attached [pid 10731] <... write resumed>) = 262144 [pid 10730] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10730] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10732] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10731] munmap(0x7f5527ca1000, 262144 [pid 10732] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10732] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10731] <... munmap resumed>) = 0 [pid 10731] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10732] <... open resumed>) = 4 [pid 10731] <... openat resumed>) = 5 [pid 10731] ioctl(5, LOOP_SET_FD, 3 [pid 10732] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10730] <... futex resumed>) = 0 [pid 10732] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10730] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10732] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10732] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10730] <... futex resumed>) = 0 [pid 10730] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10732] <... mount resumed>) = 0 [pid 10732] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10730] <... futex resumed>) = 0 [pid 10732] <... futex resumed>) = 1 [pid 10732] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10730] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10732] <... open resumed>) = 6 [pid 10730] <... futex resumed>) = 0 [pid 10730] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10732] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10731] <... ioctl resumed>) = 0 [pid 10730] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10732] <... futex resumed>) = 0 [pid 10731] close(3 [pid 10732] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10730] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10731] <... close resumed>) = 0 [pid 10730] <... futex resumed>) = 0 [pid 10730] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10732] <... write resumed>) = 262144 [pid 10731] mkdir("./file1", 0777 [pid 10732] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10731] <... mkdir resumed>) = 0 [pid 10731] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10732] <... futex resumed>) = 1 [pid 10730] <... futex resumed>) = 0 [pid 10732] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10731] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10731] ioctl(5, LOOP_CLR_FD) = 0 [pid 10731] close(5) = 0 [pid 10731] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10731] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10730] exit_group(0) = ? [pid 10732] <... futex resumed>) = ? [pid 10731] <... futex resumed>) = ? [pid 10732] +++ exited with 0 +++ [pid 10731] +++ exited with 0 +++ [pid 10730] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10730, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1242", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1242/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1242/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1242/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1242/bus") = 0 [pid 5052] umount2("./1242/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1242/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1242/binderfs") = 0 [pid 5052] umount2("./1242/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1242/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1242/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1242/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1242/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1242") = 0 [pid 5052] mkdir("./1243", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10733 attached , child_tidptr=0x555556d60690) = 10733 [pid 10733] set_robust_list(0x555556d606a0, 24) = 0 [pid 10733] chdir("./1243") = 0 [pid 10733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10733] setpgid(0, 0) = 0 [pid 10733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10733] write(3, "1000", 4) = 4 [pid 10733] close(3) = 0 [pid 10733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10733] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10733] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10733] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [ 277.189340][T10731] loop0: detected capacity change from 0 to 512 [ 277.211302][T10731] ext4: Unknown parameter 'nouser_xattr' [pid 10733] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10733] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10734 attached => {parent_tid=[10734]}, 88) = 10734 [pid 10734] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10733] rt_sigprocmask(SIG_SETMASK, [], [pid 10734] set_robust_list(0x7f55300e29a0, 24 [pid 10733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10734] <... set_robust_list resumed>) = 0 [pid 10733] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10734] rt_sigprocmask(SIG_SETMASK, [], [pid 10733] <... futex resumed>) = 0 [pid 10734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10733] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10734] memfd_create("syzkaller", 0 [pid 10733] <... futex resumed>) = 0 [pid 10733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10734] <... memfd_create resumed>) = 3 [pid 10733] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10733] <... mprotect resumed>) = 0 [pid 10734] <... mmap resumed>) = 0x7f5527ca1000 [pid 10734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10733] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10735]}, 88) = 10735 [pid 10733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10733] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10733] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10735 attached [pid 10734] <... write resumed>) = 262144 [pid 10734] munmap(0x7f5527ca1000, 262144) = 0 [pid 10734] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10734] ioctl(4, LOOP_SET_FD, 3 [pid 10735] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10734] <... ioctl resumed>) = 0 [pid 10734] close(3) = 0 [pid 10734] mkdir("./file1", 0777 [pid 10735] <... rseq resumed>) = 0 [pid 10735] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10735] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10734] <... mkdir resumed>) = 0 [pid 10734] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10735] <... open resumed>) = 3 [pid 10735] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10735] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10733] <... futex resumed>) = 0 [pid 10733] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10735] <... futex resumed>) = 0 [pid 10733] <... futex resumed>) = 1 [pid 10735] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10733] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10735] <... mount resumed>) = 0 [pid 10734] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10735] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10733] <... futex resumed>) = 0 [pid 10735] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10733] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10734] ioctl(4, LOOP_CLR_FD [pid 10733] <... futex resumed>) = 0 [pid 10735] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10734] <... ioctl resumed>) = 0 [pid 10733] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10735] <... open resumed>) = 5 [pid 10734] close(4 [pid 10735] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10734] <... close resumed>) = 0 [pid 10735] <... futex resumed>) = 1 [pid 10734] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10733] <... futex resumed>) = 0 [pid 10735] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10734] <... futex resumed>) = 0 [pid 10733] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10734] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10733] <... futex resumed>) = 0 [pid 10733] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10734] <... write resumed>) = 262144 [pid 10734] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10733] <... futex resumed>) = 0 [pid 10734] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10733] exit_group(0 [pid 10735] <... futex resumed>) = ? [pid 10734] <... futex resumed>) = ? [pid 10733] <... exit_group resumed>) = ? [pid 10735] +++ exited with 0 +++ [pid 10734] +++ exited with 0 +++ [pid 10733] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10733, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1243", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1243/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1243/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1243/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1243/bus") = 0 [pid 5052] umount2("./1243/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1243/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1243/binderfs") = 0 [pid 5052] umount2("./1243/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1243/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1243/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1243/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 277.290950][T10734] loop0: detected capacity change from 0 to 512 [ 277.303493][T10734] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1243/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1243") = 0 [pid 5052] mkdir("./1244", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10736 attached , child_tidptr=0x555556d60690) = 10736 [pid 10736] set_robust_list(0x555556d606a0, 24) = 0 [pid 10736] chdir("./1244") = 0 [pid 10736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10736] setpgid(0, 0) = 0 [pid 10736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10736] write(3, "1000", 4) = 4 [pid 10736] close(3) = 0 [pid 10736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10736] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10736] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10736] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10736] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10736] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10736] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10737 attached [pid 10737] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10736] <... clone3 resumed> => {parent_tid=[10737]}, 88) = 10737 [pid 10737] <... rseq resumed>) = 0 [pid 10736] rt_sigprocmask(SIG_SETMASK, [], [pid 10737] set_robust_list(0x7f55300e29a0, 24 [pid 10736] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10737] <... set_robust_list resumed>) = 0 [pid 10737] rt_sigprocmask(SIG_SETMASK, [], [pid 10736] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10736] <... futex resumed>) = 0 [pid 10737] memfd_create("syzkaller", 0 [pid 10736] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10737] <... memfd_create resumed>) = 3 [pid 10736] <... mmap resumed>) = 0x7f55300a1000 [pid 10737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10736] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10736] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10736] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10738]}, 88) = 10738 [pid 10736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10736] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10738 attached ) = 0 [pid 10736] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10738] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10738] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10738] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10737] <... write resumed>) = 262144 [pid 10737] munmap(0x7f5527ca1000, 262144 [pid 10738] <... open resumed>) = 4 [pid 10738] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10736] <... futex resumed>) = 0 [pid 10738] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10736] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10736] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10738] <... futex resumed>) = 0 [pid 10737] <... munmap resumed>) = 0 [pid 10737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10737] ioctl(5, LOOP_SET_FD, 3) = 0 [pid 10737] close(3) = 0 [pid 10737] mkdir("./file1", 0777 [pid 10738] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10737] <... mkdir resumed>) = 0 [pid 10737] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10738] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10738] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10736] <... futex resumed>) = 0 [pid 10736] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10738] <... futex resumed>) = 0 [pid 10738] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10738] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10738] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10736] <... futex resumed>) = 1 [pid 10736] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10736] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10738] <... futex resumed>) = 0 [pid 10738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10737] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10736] <... futex resumed>) = 1 [pid 10737] ioctl(5, LOOP_CLR_FD [pid 10736] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10737] <... ioctl resumed>) = 0 [pid 10737] close(5) = 0 [pid 10737] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10737] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10738] <... write resumed>) = 262144 [pid 10738] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10736] <... futex resumed>) = 0 [pid 10738] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10736] exit_group(0 [pid 10738] <... futex resumed>) = ? [pid 10737] <... futex resumed>) = ? [pid 10736] <... exit_group resumed>) = ? [pid 10738] +++ exited with 0 +++ [pid 10737] +++ exited with 0 +++ [pid 10736] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10736, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1244", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1244/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1244/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1244/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1244/bus") = 0 [pid 5052] umount2("./1244/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1244/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1244/binderfs") = 0 [pid 5052] umount2("./1244/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1244/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1244/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1244/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 277.387043][T10737] loop0: detected capacity change from 0 to 512 [ 277.397333][T10737] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1244/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1244") = 0 [pid 5052] mkdir("./1245", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10739 attached , child_tidptr=0x555556d60690) = 10739 [pid 10739] set_robust_list(0x555556d606a0, 24) = 0 [pid 10739] chdir("./1245") = 0 [pid 10739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10739] setpgid(0, 0) = 0 [pid 10739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10739] write(3, "1000", 4) = 4 [pid 10739] close(3) = 0 [pid 10739] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10739] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10739] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10739] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10739] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10739] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10739] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10740]}, 88) = 10740 [pid 10739] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10740 attached [pid 10740] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10739] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10739] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10740] <... rseq resumed>) = 0 [pid 10739] <... futex resumed>) = 0 [pid 10740] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10740] rt_sigprocmask(SIG_SETMASK, [], [pid 10739] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10739] <... mprotect resumed>) = 0 [pid 10739] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10740] memfd_create("syzkaller", 0 [pid 10739] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10739] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10741 attached => {parent_tid=[10741]}, 88) = 10741 [pid 10741] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10739] rt_sigprocmask(SIG_SETMASK, [], [pid 10741] set_robust_list(0x7f55300c19a0, 24 [pid 10740] <... memfd_create resumed>) = 3 [pid 10739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10741] <... set_robust_list resumed>) = 0 [pid 10740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10739] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10739] <... futex resumed>) = 0 [pid 10741] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10739] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10741] <... open resumed>) = 4 [pid 10740] <... mmap resumed>) = 0x7f5527ca1000 [pid 10741] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10739] <... futex resumed>) = 0 [pid 10741] <... futex resumed>) = 1 [pid 10739] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10741] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10739] <... futex resumed>) = 0 [pid 10741] <... mount resumed>) = 0 [pid 10739] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10741] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10739] <... futex resumed>) = 0 [pid 10739] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10739] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10741] <... futex resumed>) = 1 [pid 10741] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10741] <... open resumed>) = 5 [pid 10741] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10739] <... futex resumed>) = 0 [pid 10741] <... futex resumed>) = 1 [pid 10739] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10741] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10739] <... futex resumed>) = 0 [pid 10741] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10739] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10741] <... futex resumed>) = 0 [pid 10739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10741] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10740] <... write resumed>) = 262144 [pid 10740] munmap(0x7f5527ca1000, 262144) = 0 [pid 10740] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10740] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10740] close(3) = 0 [pid 10740] mkdir("./file1", 0777) = 0 [pid 10740] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10740] ioctl(6, LOOP_CLR_FD) = 0 [pid 10740] close(6) = 0 [pid 10740] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10740] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10739] exit_group(0 [pid 10740] <... futex resumed>) = ? [pid 10741] <... futex resumed>) = ? [pid 10739] <... exit_group resumed>) = ? [pid 10741] +++ exited with 0 +++ [pid 10740] +++ exited with 0 +++ [pid 10739] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10739, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1245", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1245/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1245/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1245/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1245/bus") = 0 [pid 5052] umount2("./1245/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1245/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1245/binderfs") = 0 [pid 5052] umount2("./1245/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1245/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1245/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1245/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1245/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1245") = 0 [pid 5052] mkdir("./1246", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 277.509597][T10740] loop0: detected capacity change from 0 to 512 [ 277.518249][T10740] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10742 attached , child_tidptr=0x555556d60690) = 10742 [pid 10742] set_robust_list(0x555556d606a0, 24) = 0 [pid 10742] chdir("./1246") = 0 [pid 10742] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10742] setpgid(0, 0) = 0 [pid 10742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10742] write(3, "1000", 4) = 4 [pid 10742] close(3) = 0 [pid 10742] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10742] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10742] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10742] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10742] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10742] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10743 attached [pid 10743] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10742] <... clone3 resumed> => {parent_tid=[10743]}, 88) = 10743 [pid 10743] <... rseq resumed>) = 0 [pid 10742] rt_sigprocmask(SIG_SETMASK, [], [pid 10743] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10743] rt_sigprocmask(SIG_SETMASK, [], [pid 10742] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10742] <... futex resumed>) = 0 [pid 10743] memfd_create("syzkaller", 0 [pid 10742] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10743] <... memfd_create resumed>) = 3 [pid 10743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10742] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10742] <... mprotect resumed>) = 0 [pid 10742] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10744]}, 88) = 10744 [pid 10742] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10742] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10744 attached [pid 10743] <... write resumed>) = 262144 [pid 10742] <... futex resumed>) = 0 [pid 10744] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10744] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10744] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10742] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10743] munmap(0x7f5527ca1000, 262144 [pid 10744] <... open resumed>) = 4 [pid 10744] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10742] <... futex resumed>) = 0 [pid 10744] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10742] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10742] <... futex resumed>) = 0 [pid 10744] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10742] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10743] <... munmap resumed>) = 0 [pid 10743] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10743] ioctl(5, LOOP_SET_FD, 3) = 0 [pid 10743] close(3) = 0 [pid 10743] mkdir("./file1", 0777 [pid 10744] <... mount resumed>) = 0 [pid 10743] <... mkdir resumed>) = 0 [pid 10743] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10744] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10742] <... futex resumed>) = 0 [pid 10742] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10744] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10742] <... futex resumed>) = 0 [pid 10742] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10744] <... open resumed>) = 3 [pid 10744] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10742] <... futex resumed>) = 0 [pid 10744] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10742] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10744] <... futex resumed>) = 0 [pid 10742] <... futex resumed>) = 1 [pid 10744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10742] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10743] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10743] ioctl(5, LOOP_CLR_FD) = 0 [pid 10743] close(5) = 0 [pid 10743] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10743] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10744] <... write resumed>) = 262144 [pid 10744] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10742] <... futex resumed>) = 0 [pid 10744] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10742] exit_group(0 [pid 10744] <... futex resumed>) = ? [pid 10743] <... futex resumed>) = ? [pid 10742] <... exit_group resumed>) = ? [pid 10744] +++ exited with 0 +++ [pid 10743] +++ exited with 0 +++ [pid 10742] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10742, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 277.617211][T10743] loop0: detected capacity change from 0 to 512 [ 277.629213][T10743] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1246", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1246/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1246/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1246/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1246/bus") = 0 [pid 5052] umount2("./1246/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1246/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1246/binderfs") = 0 [pid 5052] umount2("./1246/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1246/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1246/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1246/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1246/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1246") = 0 [pid 5052] mkdir("./1247", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10745 attached , child_tidptr=0x555556d60690) = 10745 [pid 10745] set_robust_list(0x555556d606a0, 24) = 0 [pid 10745] chdir("./1247") = 0 [pid 10745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10745] setpgid(0, 0) = 0 [pid 10745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10745] write(3, "1000", 4) = 4 [pid 10745] close(3) = 0 [pid 10745] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10745] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10745] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10745] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10745] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10745] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10746 attached => {parent_tid=[10746]}, 88) = 10746 [pid 10745] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10745] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10745] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10745] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10745] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10745] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10745] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10747 attached [pid 10746] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10747] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10746] <... rseq resumed>) = 0 [pid 10745] <... clone3 resumed> => {parent_tid=[10747]}, 88) = 10747 [pid 10747] <... rseq resumed>) = 0 [pid 10746] set_robust_list(0x7f55300e29a0, 24 [pid 10745] rt_sigprocmask(SIG_SETMASK, [], [pid 10747] set_robust_list(0x7f55300c19a0, 24 [pid 10746] <... set_robust_list resumed>) = 0 [pid 10745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10747] <... set_robust_list resumed>) = 0 [pid 10746] rt_sigprocmask(SIG_SETMASK, [], [pid 10745] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10745] <... futex resumed>) = 0 [pid 10747] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10745] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10747] <... open resumed>) = 3 [pid 10746] memfd_create("syzkaller", 0 [pid 10747] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10746] <... memfd_create resumed>) = 4 [pid 10746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10747] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10745] <... futex resumed>) = 0 [pid 10745] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10746] <... mmap resumed>) = 0x7f5527ca1000 [pid 10747] <... futex resumed>) = 0 [pid 10747] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10745] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10747] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10745] <... futex resumed>) = 0 [pid 10745] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10746] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10745] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10747] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10747] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10745] <... futex resumed>) = 0 [pid 10747] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10745] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10747] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10745] <... futex resumed>) = 0 [pid 10747] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10745] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10747] <... futex resumed>) = 0 [pid 10745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10747] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10746] <... write resumed>) = 262144 [pid 10746] munmap(0x7f5527ca1000, 262144) = 0 [pid 10746] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10746] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10746] close(4) = 0 [pid 10746] mkdir("./file1", 0777) = 0 [pid 10746] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10746] ioctl(6, LOOP_CLR_FD) = 0 [pid 10746] close(6) = 0 [pid 10746] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10746] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10745] exit_group(0 [pid 10747] <... futex resumed>) = ? [pid 10747] +++ exited with 0 +++ [pid 10746] <... futex resumed>) = ? [pid 10745] <... exit_group resumed>) = ? [pid 10746] +++ exited with 0 +++ [pid 10745] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10745, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1247", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1247/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1247/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1247/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1247/bus") = 0 [pid 5052] umount2("./1247/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1247/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1247/binderfs") = 0 [pid 5052] umount2("./1247/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1247/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1247/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1247/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1247/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1247") = 0 [pid 5052] mkdir("./1248", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10748 attached , child_tidptr=0x555556d60690) = 10748 [pid 10748] set_robust_list(0x555556d606a0, 24) = 0 [pid 10748] chdir("./1248") = 0 [pid 10748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10748] setpgid(0, 0) = 0 [pid 10748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10748] write(3, "1000", 4) = 4 [pid 10748] close(3) = 0 [ 277.738630][T10746] loop0: detected capacity change from 0 to 512 [ 277.748403][T10746] ext4: Unknown parameter 'nouser_xattr' [pid 10748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10748] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10748] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10748] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10748] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10748] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10749 attached => {parent_tid=[10749]}, 88) = 10749 [pid 10749] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10749] set_robust_list(0x7f55300e29a0, 24 [pid 10748] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10749] <... set_robust_list resumed>) = 0 [pid 10748] <... futex resumed>) = 0 [pid 10749] rt_sigprocmask(SIG_SETMASK, [], [pid 10748] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10749] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10748] <... futex resumed>) = 0 [pid 10748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10749] memfd_create("syzkaller", 0 [pid 10748] <... mmap resumed>) = 0x7f55300a1000 [pid 10749] <... memfd_create resumed>) = 3 [pid 10748] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10748] <... mprotect resumed>) = 0 [pid 10749] <... mmap resumed>) = 0x7f5527ca1000 [pid 10748] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10750]}, 88) = 10750 [pid 10748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10748] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10748] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10750 attached [pid 10749] <... write resumed>) = 262144 [pid 10749] munmap(0x7f5527ca1000, 262144 [pid 10750] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10749] <... munmap resumed>) = 0 [pid 10749] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10749] ioctl(4, LOOP_SET_FD, 3 [pid 10750] <... rseq resumed>) = 0 [pid 10750] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10750] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10750] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 10750] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10750] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10748] <... futex resumed>) = 0 [pid 10748] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10750] <... futex resumed>) = 0 [pid 10748] <... futex resumed>) = 1 [pid 10750] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10748] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10749] <... ioctl resumed>) = 0 [pid 10749] close(3) = 0 [pid 10750] <... mount resumed>) = 0 [pid 10749] mkdir("./file1", 0777 [pid 10750] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10748] <... futex resumed>) = 0 [pid 10750] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10748] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10750] <... futex resumed>) = 0 [pid 10748] <... futex resumed>) = 1 [pid 10750] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10748] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10750] <... open resumed>) = 3 [pid 10750] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10748] <... futex resumed>) = 0 [pid 10750] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10748] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10750] <... futex resumed>) = 0 [pid 10748] <... futex resumed>) = 1 [pid 10750] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10748] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10749] <... mkdir resumed>) = 0 [pid 10749] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10749] ioctl(4, LOOP_CLR_FD) = 0 [pid 10749] close(4) = 0 [pid 10749] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10749] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10750] <... write resumed>) = 262144 [pid 10750] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10748] <... futex resumed>) = 0 [pid 10750] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10748] exit_group(0) = ? [pid 10749] <... futex resumed>) = ? [pid 10750] <... futex resumed>) = ? [pid 10749] +++ exited with 0 +++ [pid 10750] +++ exited with 0 +++ [pid 10748] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10748, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1248", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [ 277.818870][T10749] loop0: detected capacity change from 0 to 512 [ 277.833221][T10749] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1248/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1248/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1248/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1248/bus") = 0 [pid 5052] umount2("./1248/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1248/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1248/binderfs") = 0 [pid 5052] umount2("./1248/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1248/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1248/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1248/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1248/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1248") = 0 [pid 5052] mkdir("./1249", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10751 attached , child_tidptr=0x555556d60690) = 10751 [pid 10751] set_robust_list(0x555556d606a0, 24) = 0 [pid 10751] chdir("./1249") = 0 [pid 10751] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10751] setpgid(0, 0) = 0 [pid 10751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10751] write(3, "1000", 4) = 4 [pid 10751] close(3) = 0 [pid 10751] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10751] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10751] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10751] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10751] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10751] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10751] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10751] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10752]}, 88) = 10752 [pid 10751] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10751] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10751] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10752 attached [pid 10751] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10752] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10752] set_robust_list(0x7f55300e29a0, 24 [pid 10751] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10752] <... set_robust_list resumed>) = 0 [pid 10751] <... mprotect resumed>) = 0 [pid 10751] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10751] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10752] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10753 attached [pid 10753] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10753] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10751] <... clone3 resumed> => {parent_tid=[10753]}, 88) = 10753 [pid 10753] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10751] rt_sigprocmask(SIG_SETMASK, [], [pid 10753] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10751] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10751] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10753] <... futex resumed>) = 0 [pid 10753] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10751] <... futex resumed>) = 1 [pid 10751] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10753] <... open resumed>) = 3 [pid 10753] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10751] <... futex resumed>) = 0 [pid 10751] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10753] <... futex resumed>) = 1 [pid 10751] <... futex resumed>) = 0 [pid 10753] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10751] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10753] <... mount resumed>) = 0 [pid 10753] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10751] <... futex resumed>) = 0 [pid 10751] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10753] <... futex resumed>) = 1 [pid 10751] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10753] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10753] <... open resumed>) = 4 [pid 10753] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10751] <... futex resumed>) = 0 [pid 10753] <... futex resumed>) = 1 [pid 10751] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10753] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10751] <... futex resumed>) = 0 [pid 10753] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10751] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10753] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10751] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10753] <... futex resumed>) = 0 [pid 10753] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10752] memfd_create("syzkaller", 0) = 5 [pid 10752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10752] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10752] munmap(0x7f5527ca1000, 262144) = 0 [pid 10752] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10752] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 10752] close(5) = 0 [pid 10752] mkdir("./file1", 0777) = 0 [pid 10752] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10752] ioctl(6, LOOP_CLR_FD) = 0 [pid 10752] close(6) = 0 [pid 10752] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10751] exit_group(0 [pid 10752] <... futex resumed>) = 0 [pid 10752] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10753] <... futex resumed>) = ? [pid 10752] <... futex resumed>) = ? [pid 10751] <... exit_group resumed>) = ? [pid 10753] +++ exited with 0 +++ [pid 10752] +++ exited with 0 +++ [pid 10751] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10751, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1249", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1249/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1249/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1249/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1249/bus") = 0 [pid 5052] umount2("./1249/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1249/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1249/binderfs") = 0 [pid 5052] umount2("./1249/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1249/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1249/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1249/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1249/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1249") = 0 [ 277.946020][T10752] loop0: detected capacity change from 0 to 512 [ 277.955966][T10752] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1250", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10754 attached , child_tidptr=0x555556d60690) = 10754 [pid 10754] set_robust_list(0x555556d606a0, 24) = 0 [pid 10754] chdir("./1250") = 0 [pid 10754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10754] setpgid(0, 0) = 0 [pid 10754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10754] write(3, "1000", 4) = 4 [pid 10754] close(3) = 0 [pid 10754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10754] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10754] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10754] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10754] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10754] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10755 attached => {parent_tid=[10755]}, 88) = 10755 [pid 10754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10754] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10754] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10754] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10755] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10755] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10755] rt_sigprocmask(SIG_SETMASK, [], [pid 10754] <... mprotect resumed>) = 0 [pid 10755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10755] memfd_create("syzkaller", 0) = 3 [pid 10754] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10754] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10756]}, 88) = 10756 ./strace-static-x86_64: Process 10756 attached [pid 10755] <... mmap resumed>) = 0x7f5527ca1000 [pid 10756] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10754] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10754] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10756] <... rseq resumed>) = 0 [pid 10756] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10756] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10756] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10755] <... write resumed>) = 262144 [pid 10756] <... futex resumed>) = 1 [pid 10756] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10755] munmap(0x7f5527ca1000, 262144 [pid 10754] <... futex resumed>) = 0 [pid 10754] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10756] <... futex resumed>) = 0 [pid 10756] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10754] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10756] <... mount resumed>) = 0 [pid 10756] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10754] <... futex resumed>) = 0 [pid 10756] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10754] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10754] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10756] <... open resumed>) = 5 [pid 10756] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10756] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10754] <... futex resumed>) = 0 [pid 10756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10754] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10756] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10754] <... futex resumed>) = 0 [pid 10756] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10754] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10756] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10756] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10755] <... munmap resumed>) = 0 [pid 10755] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10755] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10755] close(3) = 0 [pid 10755] mkdir("./file1", 0777) = 0 [pid 10755] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10755] ioctl(6, LOOP_CLR_FD) = 0 [pid 10755] close(6) = 0 [pid 10755] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10754] exit_group(0) = ? [pid 10755] <... futex resumed>) = ? [pid 10755] +++ exited with 0 +++ [pid 10756] <... futex resumed>) = ? [pid 10756] +++ exited with 0 +++ [pid 10754] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10754, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] umount2("./1250", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1250/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1250/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1250/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1250/bus") = 0 [pid 5052] umount2("./1250/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1250/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1250/binderfs") = 0 [pid 5052] umount2("./1250/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1250/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1250/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1250/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1250/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1250") = 0 [pid 5052] mkdir("./1251", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10757 ./strace-static-x86_64: Process 10757 attached [pid 10757] set_robust_list(0x555556d606a0, 24) = 0 [pid 10757] chdir("./1251") = 0 [pid 10757] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10757] setpgid(0, 0) = 0 [ 278.060437][T10755] loop0: detected capacity change from 0 to 512 [ 278.069530][T10755] ext4: Unknown parameter 'nouser_xattr' [pid 10757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10757] write(3, "1000", 4) = 4 [pid 10757] close(3) = 0 [pid 10757] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10757] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10757] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10757] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10757] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10757] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10757] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10757] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10758 attached [pid 10758] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10757] <... clone3 resumed> => {parent_tid=[10758]}, 88) = 10758 [pid 10758] <... rseq resumed>) = 0 [pid 10757] rt_sigprocmask(SIG_SETMASK, [], [pid 10758] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10758] rt_sigprocmask(SIG_SETMASK, [], [pid 10757] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10758] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10757] <... futex resumed>) = 0 [pid 10758] memfd_create("syzkaller", 0 [pid 10757] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10757] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10758] <... memfd_create resumed>) = 3 [pid 10757] <... mmap resumed>) = 0x7f55300a1000 [pid 10758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10757] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10757] <... mprotect resumed>) = 0 [pid 10757] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10757] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10759]}, 88) = 10759 [pid 10757] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10757] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10757] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10758] <... write resumed>) = 262144 [pid 10758] munmap(0x7f5527ca1000, 262144) = 0 [pid 10758] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10758] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 10759 attached [pid 10759] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10758] <... ioctl resumed>) = 0 [pid 10758] close(3 [pid 10759] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10758] <... close resumed>) = 0 [pid 10758] mkdir("./file1", 0777 [pid 10759] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10759] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10758] <... mkdir resumed>) = 0 [pid 10759] <... open resumed>) = 3 [pid 10759] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10759] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10757] <... futex resumed>) = 0 [pid 10757] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10757] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10758] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10759] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10759] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10758] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10759] <... futex resumed>) = 1 [pid 10758] ioctl(4, LOOP_CLR_FD [pid 10757] <... futex resumed>) = 0 [pid 10759] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10757] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10757] <... futex resumed>) = 0 [pid 10759] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10757] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10759] <... open resumed>) = 5 [pid 10759] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10757] <... futex resumed>) = 0 [pid 10759] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10757] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 278.147771][T10758] loop0: detected capacity change from 0 to 512 [ 278.169637][T10758] ext4: Unknown parameter 'nouser_xattr' [pid 10757] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10759] <... write resumed>) = -1 EIO (Input/output error) [pid 10759] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10757] <... futex resumed>) = 0 [pid 10759] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10758] <... ioctl resumed>) = 0 [pid 10758] close(4) = 0 [pid 10758] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10758] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10757] exit_group(0 [pid 10759] <... futex resumed>) = ? [pid 10758] <... futex resumed>) = ? [pid 10757] <... exit_group resumed>) = ? [pid 10759] +++ exited with 0 +++ [pid 10758] +++ exited with 0 +++ [pid 10757] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10757, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1251", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1251/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1251/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1251/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1251/bus") = 0 [pid 5052] umount2("./1251/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 278.216456][T10759] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 278.226032][T10759] Buffer I/O error on dev loop0, logical block 0, lost async page write [pid 5052] newfstatat(AT_FDCWD, "./1251/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1251/binderfs") = 0 [pid 5052] umount2("./1251/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1251/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1251/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1251/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1251/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1251") = 0 [pid 5052] mkdir("./1252", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10760 attached , child_tidptr=0x555556d60690) = 10760 [pid 10760] set_robust_list(0x555556d606a0, 24) = 0 [pid 10760] chdir("./1252") = 0 [pid 10760] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10760] setpgid(0, 0) = 0 [pid 10760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10760] write(3, "1000", 4) = 4 [pid 10760] close(3) = 0 [pid 10760] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10760] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10760] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10760] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10760] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10760] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10760] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10761 attached => {parent_tid=[10761]}, 88) = 10761 [pid 10761] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10760] rt_sigprocmask(SIG_SETMASK, [], [pid 10761] set_robust_list(0x7f55300e29a0, 24 [pid 10760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10761] <... set_robust_list resumed>) = 0 [pid 10760] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10761] rt_sigprocmask(SIG_SETMASK, [], [pid 10760] <... futex resumed>) = 0 [pid 10761] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10760] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10761] memfd_create("syzkaller", 0 [pid 10760] <... futex resumed>) = 0 [pid 10760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10761] <... memfd_create resumed>) = 3 [pid 10761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10760] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10761] <... mmap resumed>) = 0x7f5527ca1000 [pid 10760] <... mprotect resumed>) = 0 [pid 10760] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10760] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10760] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10762]}, 88) = 10762 [pid 10760] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10760] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10760] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10762 attached [pid 10762] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10762] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10762] rt_sigprocmask(SIG_SETMASK, [], [pid 10761] <... write resumed>) = 262144 [pid 10762] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10761] munmap(0x7f5527ca1000, 262144 [pid 10762] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10761] <... munmap resumed>) = 0 [pid 10761] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10762] <... open resumed>) = 4 [pid 10762] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10761] <... openat resumed>) = 5 [pid 10760] <... futex resumed>) = 0 [pid 10761] ioctl(5, LOOP_SET_FD, 3 [pid 10760] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10762] <... futex resumed>) = 1 [pid 10760] <... futex resumed>) = 0 [pid 10760] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10762] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10762] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10760] <... futex resumed>) = 0 [pid 10760] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10762] <... futex resumed>) = 1 [pid 10760] <... futex resumed>) = 0 [pid 10760] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10762] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10762] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10760] <... futex resumed>) = 0 [pid 10760] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10762] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10760] <... futex resumed>) = 0 [pid 10761] <... ioctl resumed>) = 0 [pid 10760] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10761] close(3) = 0 [pid 10761] mkdir("./file1", 0777) = 0 [pid 10761] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10761] ioctl(5, LOOP_CLR_FD) = 0 [pid 10761] close(5) = 0 [pid 10762] <... write resumed>) = 262144 [pid 10761] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10762] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10761] <... futex resumed>) = 0 [pid 10761] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10762] <... futex resumed>) = 1 [pid 10760] <... futex resumed>) = 0 [pid 10762] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10760] exit_group(0 [pid 10762] <... futex resumed>) = ? [pid 10762] +++ exited with 0 +++ [pid 10761] <... futex resumed>) = ? [pid 10761] +++ exited with 0 +++ [pid 10760] <... exit_group resumed>) = ? [pid 10760] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10760, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1252", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1252/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1252/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1252/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1252/bus") = 0 [pid 5052] umount2("./1252/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1252/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1252/binderfs") = 0 [pid 5052] umount2("./1252/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1252/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1252/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1252/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1252/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1252") = 0 [ 278.335911][T10761] loop0: detected capacity change from 0 to 512 [ 278.347205][T10761] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1253", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10763 attached , child_tidptr=0x555556d60690) = 10763 [pid 10763] set_robust_list(0x555556d606a0, 24) = 0 [pid 10763] chdir("./1253") = 0 [pid 10763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10763] setpgid(0, 0) = 0 [pid 10763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10763] write(3, "1000", 4) = 4 [pid 10763] close(3) = 0 [pid 10763] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10763] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10763] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10763] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10763] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10763] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10763] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10764]}, 88) = 10764 [pid 10763] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10763] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10764 attached ) = 0 [pid 10764] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10763] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10764] <... rseq resumed>) = 0 [pid 10764] set_robust_list(0x7f55300e29a0, 24 [pid 10763] <... futex resumed>) = 0 [pid 10764] <... set_robust_list resumed>) = 0 [pid 10764] rt_sigprocmask(SIG_SETMASK, [], [pid 10763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10763] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10763] <... mprotect resumed>) = 0 [pid 10764] memfd_create("syzkaller", 0) = 3 [pid 10763] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10763] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10763] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10765]}, 88) = 10765 ./strace-static-x86_64: Process 10765 attached [pid 10763] rt_sigprocmask(SIG_SETMASK, [], [pid 10765] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10765] set_robust_list(0x7f55300c19a0, 24 [pid 10763] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10765] <... set_robust_list resumed>) = 0 [pid 10763] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10765] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10765] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10763] <... futex resumed>) = 0 [pid 10763] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10763] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10765] <... futex resumed>) = 1 [pid 10765] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10765] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10763] <... futex resumed>) = 0 [pid 10764] <... write resumed>) = 262144 [pid 10763] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10765] <... futex resumed>) = 1 [pid 10763] <... futex resumed>) = 0 [pid 10765] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10763] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10765] <... open resumed>) = 5 [pid 10765] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10765] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10763] <... futex resumed>) = 0 [pid 10763] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10764] munmap(0x7f5527ca1000, 262144 [pid 10763] <... futex resumed>) = 1 [pid 10765] <... futex resumed>) = 0 [pid 10763] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10765] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10764] <... munmap resumed>) = 0 [pid 10765] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10764] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10763] <... futex resumed>) = 0 [pid 10765] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10764] <... openat resumed>) = 6 [pid 10764] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10764] close(3) = 0 [pid 10764] mkdir("./file1", 0777) = 0 [pid 10764] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10764] ioctl(6, LOOP_CLR_FD) = 0 [pid 10764] close(6) = 0 [pid 10764] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10763] exit_group(0) = ? [pid 10765] <... futex resumed>) = ? [pid 10765] +++ exited with 0 +++ [pid 10764] <... futex resumed>) = ? [pid 10764] +++ exited with 0 +++ [pid 10763] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10763, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1253", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1253/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1253/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1253/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1253/bus") = 0 [pid 5052] umount2("./1253/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1253/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1253/binderfs") = 0 [pid 5052] umount2("./1253/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1253/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1253/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1253/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1253/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1253") = 0 [pid 5052] mkdir("./1254", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10766 attached , child_tidptr=0x555556d60690) = 10766 [pid 10766] set_robust_list(0x555556d606a0, 24) = 0 [pid 10766] chdir("./1254") = 0 [pid 10766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10766] setpgid(0, 0) = 0 [pid 10766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10766] write(3, "1000", 4) = 4 [pid 10766] close(3) = 0 [pid 10766] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10766] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10766] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10766] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10766] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10767 attached [pid 10767] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10766] <... clone3 resumed> => {parent_tid=[10767]}, 88) = 10767 [pid 10767] <... rseq resumed>) = 0 [pid 10766] rt_sigprocmask(SIG_SETMASK, [], [pid 10767] set_robust_list(0x7f55300e29a0, 24 [pid 10766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10767] <... set_robust_list resumed>) = 0 [pid 10766] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10767] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10766] <... futex resumed>) = 0 [pid 10767] memfd_create("syzkaller", 0 [pid 10766] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10767] <... memfd_create resumed>) = 3 [pid 10766] <... mmap resumed>) = 0x7f55300a1000 [pid 10767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10766] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 278.449040][T10764] loop0: detected capacity change from 0 to 512 [ 278.458429][T10764] ext4: Unknown parameter 'nouser_xattr' [pid 10766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10768]}, 88) = 10768 [pid 10766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10766] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10766] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10768 attached [pid 10768] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10768] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10768] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10768] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10767] <... write resumed>) = 262144 [pid 10768] <... open resumed>) = 4 [pid 10768] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10767] munmap(0x7f5527ca1000, 262144 [pid 10768] <... futex resumed>) = 1 [pid 10766] <... futex resumed>) = 0 [pid 10768] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10767] <... munmap resumed>) = 0 [pid 10766] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10766] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10767] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10767] ioctl(5, LOOP_SET_FD, 3 [pid 10768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10768] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10768] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10767] <... ioctl resumed>) = 0 [pid 10768] <... futex resumed>) = 1 [pid 10767] close(3 [pid 10766] <... futex resumed>) = 0 [pid 10768] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10767] <... close resumed>) = 0 [pid 10766] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10767] mkdir("./file1", 0777 [pid 10766] <... futex resumed>) = 0 [pid 10768] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10766] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10768] <... open resumed>) = 3 [pid 10767] <... mkdir resumed>) = 0 [pid 10768] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10766] <... futex resumed>) = 0 [pid 10768] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10766] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10767] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10766] <... futex resumed>) = 0 [pid 10768] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10767] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10766] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10767] ioctl(5, LOOP_CLR_FD) = 0 [pid 10767] close(5) = 0 [pid 10767] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10767] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10768] <... write resumed>) = 262144 [pid 10768] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10766] <... futex resumed>) = 0 [pid 10766] exit_group(0 [pid 10767] <... futex resumed>) = ? [pid 10766] <... exit_group resumed>) = ? [pid 10767] +++ exited with 0 +++ [pid 10768] +++ exited with 0 +++ [pid 10766] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10766, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 278.521216][T10767] loop0: detected capacity change from 0 to 512 [ 278.538624][T10767] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1254", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1254/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1254/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1254/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1254/bus") = 0 [pid 5052] umount2("./1254/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1254/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1254/binderfs") = 0 [pid 5052] umount2("./1254/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1254/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1254/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1254/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1254/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1254") = 0 [pid 5052] mkdir("./1255", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10769 attached , child_tidptr=0x555556d60690) = 10769 [pid 10769] set_robust_list(0x555556d606a0, 24) = 0 [pid 10769] chdir("./1255") = 0 [pid 10769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10769] setpgid(0, 0) = 0 [pid 10769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10769] write(3, "1000", 4) = 4 [pid 10769] close(3) = 0 [pid 10769] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10769] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10769] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10769] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10769] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10769] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10769] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10770 attached => {parent_tid=[10770]}, 88) = 10770 [pid 10770] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10769] rt_sigprocmask(SIG_SETMASK, [], [pid 10770] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10769] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10770] rt_sigprocmask(SIG_SETMASK, [], [pid 10769] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10769] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10770] memfd_create("syzkaller", 0 [pid 10769] <... mmap resumed>) = 0x7f55300a1000 [pid 10769] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10770] <... memfd_create resumed>) = 3 [pid 10769] <... mprotect resumed>) = 0 [pid 10770] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10769] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10769] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10771 attached [pid 10771] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10771] set_robust_list(0x7f55300c19a0, 24 [pid 10769] <... clone3 resumed> => {parent_tid=[10771]}, 88) = 10771 [pid 10770] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10771] <... set_robust_list resumed>) = 0 [pid 10769] rt_sigprocmask(SIG_SETMASK, [], [pid 10771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10769] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10771] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10769] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10771] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10769] <... futex resumed>) = 0 [pid 10771] <... open resumed>) = 4 [pid 10769] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10771] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10769] <... futex resumed>) = 0 [pid 10771] <... futex resumed>) = 1 [pid 10769] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10771] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10769] <... futex resumed>) = 0 [pid 10771] <... mount resumed>) = 0 [pid 10769] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10771] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10769] <... futex resumed>) = 0 [pid 10769] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10770] <... write resumed>) = 262144 [pid 10769] <... futex resumed>) = 0 [pid 10769] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10771] <... futex resumed>) = 1 [pid 10771] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10771] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10769] <... futex resumed>) = 0 [pid 10769] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10771] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10769] <... futex resumed>) = 0 [pid 10771] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10769] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10771] <... futex resumed>) = 0 [pid 10769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10771] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10770] munmap(0x7f5527ca1000, 262144) = 0 [pid 10770] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10770] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10770] close(3) = 0 [pid 10770] mkdir("./file1", 0777) = 0 [pid 10770] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10770] ioctl(6, LOOP_CLR_FD) = 0 [pid 10770] close(6) = 0 [pid 10770] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10770] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10769] exit_group(0) = ? [pid 10771] <... futex resumed>) = ? [pid 10771] +++ exited with 0 +++ [pid 10770] <... futex resumed>) = ? [pid 10770] +++ exited with 0 +++ [pid 10769] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10769, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1255", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1255/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1255/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1255/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1255/bus") = 0 [pid 5052] umount2("./1255/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1255/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1255/binderfs") = 0 [pid 5052] umount2("./1255/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1255/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1255/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1255/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1255/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 278.657405][T10770] loop0: detected capacity change from 0 to 512 [ 278.667834][T10770] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1255") = 0 [pid 5052] mkdir("./1256", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10772 attached , child_tidptr=0x555556d60690) = 10772 [pid 10772] set_robust_list(0x555556d606a0, 24) = 0 [pid 10772] chdir("./1256") = 0 [pid 10772] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10772] setpgid(0, 0) = 0 [pid 10772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10772] write(3, "1000", 4) = 4 [pid 10772] close(3) = 0 [pid 10772] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10772] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10772] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10772] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10772] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10772] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10772] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10773 attached [pid 10773] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10772] <... clone3 resumed> => {parent_tid=[10773]}, 88) = 10773 [pid 10773] <... rseq resumed>) = 0 [pid 10772] rt_sigprocmask(SIG_SETMASK, [], [pid 10773] set_robust_list(0x7f55300e29a0, 24 [pid 10772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10773] <... set_robust_list resumed>) = 0 [pid 10773] rt_sigprocmask(SIG_SETMASK, [], [pid 10772] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10773] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10772] <... futex resumed>) = 0 [pid 10773] memfd_create("syzkaller", 0 [pid 10772] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10773] <... memfd_create resumed>) = 3 [pid 10772] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10772] <... mprotect resumed>) = 0 [pid 10773] <... mmap resumed>) = 0x7f5527ca1000 [pid 10772] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10772] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10774 attached [pid 10774] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10772] <... clone3 resumed> => {parent_tid=[10774]}, 88) = 10774 [pid 10774] <... rseq resumed>) = 0 [pid 10772] rt_sigprocmask(SIG_SETMASK, [], [pid 10774] set_robust_list(0x7f55300c19a0, 24 [pid 10772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10774] <... set_robust_list resumed>) = 0 [pid 10772] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10774] rt_sigprocmask(SIG_SETMASK, [], [pid 10772] <... futex resumed>) = 0 [pid 10774] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10772] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10774] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10774] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10772] <... futex resumed>) = 0 [pid 10774] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10772] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10772] <... futex resumed>) = 0 [pid 10774] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10772] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10774] <... mount resumed>) = 0 [pid 10774] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10772] <... futex resumed>) = 0 [pid 10772] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10774] <... futex resumed>) = 1 [pid 10773] <... write resumed>) = 262144 [pid 10773] munmap(0x7f5527ca1000, 262144 [pid 10772] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10774] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10773] <... munmap resumed>) = 0 [pid 10774] <... open resumed>) = 5 [pid 10773] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10774] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10773] <... openat resumed>) = 6 [pid 10774] <... futex resumed>) = 1 [pid 10772] <... futex resumed>) = 0 [pid 10774] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10772] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10774] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10773] ioctl(6, LOOP_SET_FD, 3 [pid 10772] <... futex resumed>) = 0 [pid 10774] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10772] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10774] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10772] <... futex resumed>) = 0 [pid 10774] <... futex resumed>) = 1 [pid 10774] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10773] <... ioctl resumed>) = 0 [pid 10773] close(3) = 0 [pid 10773] mkdir("./file1", 0777) = 0 [pid 10773] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10773] ioctl(6, LOOP_CLR_FD) = 0 [pid 10773] close(6) = 0 [pid 10773] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10772] exit_group(0 [pid 10774] <... futex resumed>) = ? [pid 10772] <... exit_group resumed>) = ? [pid 10773] +++ exited with 0 +++ [pid 10774] +++ exited with 0 +++ [pid 10772] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10772, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] umount2("./1256", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1256/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1256/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1256/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1256/bus") = 0 [pid 5052] umount2("./1256/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1256/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1256/binderfs") = 0 [pid 5052] umount2("./1256/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1256/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1256/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1256/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1256/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1256") = 0 [pid 5052] mkdir("./1257", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10775 attached , child_tidptr=0x555556d60690) = 10775 [pid 10775] set_robust_list(0x555556d606a0, 24) = 0 [pid 10775] chdir("./1257") = 0 [pid 10775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10775] setpgid(0, 0) = 0 [pid 10775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10775] write(3, "1000", 4) = 4 [pid 10775] close(3) = 0 [ 278.774499][T10773] loop0: detected capacity change from 0 to 512 [ 278.784163][T10773] ext4: Unknown parameter 'nouser_xattr' [pid 10775] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10775] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10775] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10775] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10775] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10775] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10775] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10776]}, 88) = 10776 [pid 10775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10775] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10775] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10775] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 10776 attached [pid 10775] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10775] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10777 attached [pid 10777] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10775] <... clone3 resumed> => {parent_tid=[10777]}, 88) = 10777 [pid 10777] <... rseq resumed>) = 0 [pid 10777] set_robust_list(0x7f55300c19a0, 24 [pid 10775] rt_sigprocmask(SIG_SETMASK, [], [pid 10777] <... set_robust_list resumed>) = 0 [pid 10775] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10777] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10775] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10777] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10775] <... futex resumed>) = 0 [pid 10775] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10777] <... open resumed>) = 3 [pid 10777] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10775] <... futex resumed>) = 0 [pid 10777] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10776] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10777] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10775] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10777] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10775] <... futex resumed>) = 0 [pid 10777] <... mount resumed>) = 0 [pid 10776] <... rseq resumed>) = 0 [pid 10775] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10776] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10777] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10776] memfd_create("syzkaller", 0 [pid 10775] <... futex resumed>) = 0 [pid 10777] <... futex resumed>) = 1 [pid 10775] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10777] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10775] <... futex resumed>) = 0 [pid 10777] <... open resumed>) = 5 [pid 10775] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10776] <... memfd_create resumed>) = 4 [pid 10776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10777] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10775] <... futex resumed>) = 0 [pid 10777] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10776] <... mmap resumed>) = 0x7f5527ca1000 [pid 10775] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10777] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10775] <... futex resumed>) = 0 [pid 10777] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10775] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10777] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10777] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10775] <... futex resumed>) = 0 [pid 10777] <... futex resumed>) = 1 [pid 10777] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10776] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10776] munmap(0x7f5527ca1000, 262144) = 0 [pid 10776] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10776] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10776] close(4) = 0 [pid 10776] mkdir("./file1", 0777) = 0 [pid 10776] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10776] ioctl(6, LOOP_CLR_FD) = 0 [pid 10776] close(6) = 0 [pid 10776] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10776] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10775] exit_group(0 [pid 10776] <... futex resumed>) = ? [pid 10775] <... exit_group resumed>) = ? [pid 10776] +++ exited with 0 +++ [pid 10777] <... futex resumed>) = ? [pid 10777] +++ exited with 0 +++ [pid 10775] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10775, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1257", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1257/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1257/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1257/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1257/bus") = 0 [pid 5052] umount2("./1257/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1257/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1257/binderfs") = 0 [pid 5052] umount2("./1257/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1257/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1257/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1257/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1257/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1257") = 0 [pid 5052] mkdir("./1258", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10778 attached , child_tidptr=0x555556d60690) = 10778 [pid 10778] set_robust_list(0x555556d606a0, 24) = 0 [pid 10778] chdir("./1258") = 0 [pid 10778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 278.867419][T10776] loop0: detected capacity change from 0 to 512 [ 278.877409][T10776] ext4: Unknown parameter 'nouser_xattr' [pid 10778] setpgid(0, 0) = 0 [pid 10778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10778] write(3, "1000", 4) = 4 [pid 10778] close(3) = 0 [pid 10778] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10778] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10778] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10778] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10778] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10778] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10778] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10779 attached => {parent_tid=[10779]}, 88) = 10779 [pid 10779] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10778] rt_sigprocmask(SIG_SETMASK, [], [pid 10779] <... rseq resumed>) = 0 [pid 10779] set_robust_list(0x7f55300e29a0, 24 [pid 10778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10779] <... set_robust_list resumed>) = 0 [pid 10778] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10779] rt_sigprocmask(SIG_SETMASK, [], [pid 10778] <... futex resumed>) = 0 [pid 10779] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10778] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10779] memfd_create("syzkaller", 0 [pid 10778] <... futex resumed>) = 0 [pid 10778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10779] <... memfd_create resumed>) = 3 [pid 10778] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10778] <... mprotect resumed>) = 0 [pid 10779] <... mmap resumed>) = 0x7f5527ca1000 [pid 10778] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10778] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10780]}, 88) = 10780 ./strace-static-x86_64: Process 10780 attached [pid 10780] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10778] rt_sigprocmask(SIG_SETMASK, [], [pid 10780] <... rseq resumed>) = 0 [pid 10778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10778] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10778] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10780] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10780] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10780] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10778] <... futex resumed>) = 0 [pid 10780] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10778] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10780] <... futex resumed>) = 0 [pid 10778] <... futex resumed>) = 1 [pid 10780] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10778] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10780] <... mount resumed>) = 0 [pid 10780] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10778] <... futex resumed>) = 0 [pid 10778] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10778] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10779] <... write resumed>) = 262144 [pid 10779] munmap(0x7f5527ca1000, 262144) = 0 [pid 10779] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10779] ioctl(5, LOOP_SET_FD, 3 [pid 10780] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10779] <... ioctl resumed>) = 0 [pid 10779] close(3) = 0 [pid 10779] mkdir("./file1", 0777 [pid 10780] <... open resumed>) = 3 [pid 10779] <... mkdir resumed>) = 0 [pid 10779] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10780] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10779] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10778] <... futex resumed>) = 0 [pid 10780] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10779] ioctl(5, LOOP_CLR_FD [pid 10778] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10780] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10779] <... ioctl resumed>) = 0 [pid 10778] <... futex resumed>) = 0 [pid 10779] close(5 [pid 10778] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10779] <... close resumed>) = 0 [pid 10779] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10779] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10780] <... write resumed>) = 262144 [pid 10780] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10778] <... futex resumed>) = 0 [pid 10778] exit_group(0 [pid 10779] <... futex resumed>) = ? [pid 10778] <... exit_group resumed>) = ? [pid 10779] +++ exited with 0 +++ [pid 10780] <... futex resumed>) = ? [pid 10780] +++ exited with 0 +++ [pid 10778] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10778, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1258", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1258/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1258/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1258/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 278.957786][T10779] loop0: detected capacity change from 0 to 512 [ 278.968773][T10779] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1258/bus") = 0 [pid 5052] umount2("./1258/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1258/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1258/binderfs") = 0 [pid 5052] umount2("./1258/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1258/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1258/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1258/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1258/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1258") = 0 [pid 5052] mkdir("./1259", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10781 attached , child_tidptr=0x555556d60690) = 10781 [pid 10781] set_robust_list(0x555556d606a0, 24) = 0 [pid 10781] chdir("./1259") = 0 [pid 10781] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10781] setpgid(0, 0) = 0 [pid 10781] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10781] write(3, "1000", 4) = 4 [pid 10781] close(3) = 0 [pid 10781] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10781] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10781] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10781] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10781] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10781] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10781] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10781] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10782 attached => {parent_tid=[10782]}, 88) = 10782 [pid 10782] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10781] rt_sigprocmask(SIG_SETMASK, [], [pid 10782] <... rseq resumed>) = 0 [pid 10781] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10782] set_robust_list(0x7f55300e29a0, 24 [pid 10781] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10782] <... set_robust_list resumed>) = 0 [pid 10781] <... futex resumed>) = 0 [pid 10782] rt_sigprocmask(SIG_SETMASK, [], [pid 10781] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10781] <... futex resumed>) = 0 [pid 10782] memfd_create("syzkaller", 0 [pid 10781] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10782] <... memfd_create resumed>) = 3 [pid 10781] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10782] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10781] <... mprotect resumed>) = 0 [pid 10782] <... mmap resumed>) = 0x7f5527ca1000 [pid 10781] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10781] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10783]}, 88) = 10783 [pid 10781] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10781] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10783 attached ) = 0 [pid 10783] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10781] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10783] <... rseq resumed>) = 0 [pid 10783] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10782] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10783] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10783] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10782] <... write resumed>) = 262144 [pid 10783] <... futex resumed>) = 1 [pid 10783] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10781] <... futex resumed>) = 0 [pid 10781] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10783] <... futex resumed>) = 0 [pid 10781] <... futex resumed>) = 1 [pid 10783] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10781] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10783] <... mount resumed>) = 0 [pid 10783] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10781] <... futex resumed>) = 0 [pid 10781] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10781] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10783] <... futex resumed>) = 1 [pid 10783] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10783] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10782] munmap(0x7f5527ca1000, 262144 [pid 10781] <... futex resumed>) = 0 [pid 10781] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10781] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10783] <... futex resumed>) = 1 [pid 10783] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10783] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10781] <... futex resumed>) = 0 [pid 10783] <... futex resumed>) = 1 [pid 10783] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10782] <... munmap resumed>) = 0 [pid 10782] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10782] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10782] close(3) = 0 [pid 10782] mkdir("./file1", 0777) = 0 [pid 10782] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10782] ioctl(6, LOOP_CLR_FD) = 0 [pid 10782] close(6) = 0 [pid 10782] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10782] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10781] exit_group(0 [pid 10783] <... futex resumed>) = ? [pid 10781] <... exit_group resumed>) = ? [pid 10783] +++ exited with 0 +++ [pid 10782] <... futex resumed>) = ? [pid 10782] +++ exited with 0 +++ [pid 10781] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10781, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1259", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1259/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1259/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1259/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1259/bus") = 0 [pid 5052] umount2("./1259/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1259/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1259/binderfs") = 0 [pid 5052] umount2("./1259/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1259/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1259/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1259/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1259/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1259") = 0 [pid 5052] mkdir("./1260", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 279.061496][T10782] loop0: detected capacity change from 0 to 512 [ 279.073892][T10782] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10784 attached , child_tidptr=0x555556d60690) = 10784 [pid 10784] set_robust_list(0x555556d606a0, 24) = 0 [pid 10784] chdir("./1260") = 0 [pid 10784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10784] setpgid(0, 0) = 0 [pid 10784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10784] write(3, "1000", 4) = 4 [pid 10784] close(3) = 0 [pid 10784] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10784] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10784] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10784] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10784] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10784] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10785 attached => {parent_tid=[10785]}, 88) = 10785 [pid 10784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10784] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10784] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10784] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10784] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10786 attached [pid 10786] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10786] set_robust_list(0x7f55300c19a0, 24 [pid 10784] <... clone3 resumed> => {parent_tid=[10786]}, 88) = 10786 [pid 10786] <... set_robust_list resumed>) = 0 [pid 10786] rt_sigprocmask(SIG_SETMASK, [], [pid 10784] rt_sigprocmask(SIG_SETMASK, [], [pid 10786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10786] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10784] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10786] <... futex resumed>) = 0 [pid 10785] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10784] <... futex resumed>) = 1 [pid 10786] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10785] <... rseq resumed>) = 0 [pid 10786] <... open resumed>) = 3 [pid 10785] set_robust_list(0x7f55300e29a0, 24 [pid 10784] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10785] <... set_robust_list resumed>) = 0 [pid 10785] rt_sigprocmask(SIG_SETMASK, [], [pid 10786] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10784] <... futex resumed>) = 0 [pid 10786] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10784] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10786] <... mount resumed>) = 0 [pid 10785] memfd_create("syzkaller", 0 [pid 10784] <... futex resumed>) = 0 [pid 10784] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10785] <... memfd_create resumed>) = 4 [pid 10786] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10786] <... futex resumed>) = 1 [pid 10784] <... futex resumed>) = 0 [pid 10786] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10784] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10785] <... mmap resumed>) = 0x7f5527ca1000 [pid 10784] <... futex resumed>) = 0 [pid 10786] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10784] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10786] <... open resumed>) = 5 [pid 10786] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10786] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10784] <... futex resumed>) = 0 [pid 10786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10784] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10786] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10784] <... futex resumed>) = 0 [pid 10786] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10784] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10786] <... futex resumed>) = 0 [pid 10784] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10786] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10785] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10785] munmap(0x7f5527ca1000, 262144) = 0 [pid 10785] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10785] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10785] close(4) = 0 [pid 10785] mkdir("./file1", 0777) = 0 [pid 10785] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10785] ioctl(6, LOOP_CLR_FD) = 0 [pid 10785] close(6) = 0 [pid 10785] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10785] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10784] exit_group(0) = ? [pid 10785] <... futex resumed>) = ? [pid 10786] <... futex resumed>) = ? [pid 10786] +++ exited with 0 +++ [pid 10785] +++ exited with 0 +++ [pid 10784] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10784, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1260", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1260/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1260/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1260/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1260/bus") = 0 [pid 5052] umount2("./1260/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1260/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1260/binderfs") = 0 [pid 5052] umount2("./1260/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1260/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1260/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1260/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1260/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1260") = 0 [pid 5052] mkdir("./1261", 0777) = 0 [ 279.159766][T10785] loop0: detected capacity change from 0 to 512 [ 279.168957][T10785] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10787 attached , child_tidptr=0x555556d60690) = 10787 [pid 10787] set_robust_list(0x555556d606a0, 24) = 0 [pid 10787] chdir("./1261") = 0 [pid 10787] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10787] setpgid(0, 0) = 0 [pid 10787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10787] write(3, "1000", 4) = 4 [pid 10787] close(3) = 0 [pid 10787] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10787] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10787] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10787] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10787] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10787] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10787] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10788]}, 88) = 10788 [pid 10787] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10787] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10787] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10787] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10787] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10787] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10789 attached [pid 10789] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10789] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10787] <... clone3 resumed> => {parent_tid=[10789]}, 88) = 10789 [pid 10789] rt_sigprocmask(SIG_SETMASK, [], [pid 10787] rt_sigprocmask(SIG_SETMASK, [], [pid 10789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10787] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 10788 attached [pid 10789] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10788] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10787] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10789] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10788] <... rseq resumed>) = 0 [pid 10789] <... open resumed>) = 3 [pid 10788] set_robust_list(0x7f55300e29a0, 24 [pid 10787] <... futex resumed>) = 0 [pid 10788] <... set_robust_list resumed>) = 0 [pid 10788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10788] memfd_create("syzkaller", 0 [pid 10787] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10788] <... memfd_create resumed>) = 4 [pid 10789] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10789] <... futex resumed>) = 1 [pid 10788] <... mmap resumed>) = 0x7f5527ca1000 [pid 10787] <... futex resumed>) = 0 [pid 10787] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10789] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10787] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10789] <... mount resumed>) = 0 [pid 10789] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10788] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10787] <... futex resumed>) = 0 [pid 10787] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10789] <... futex resumed>) = 1 [pid 10787] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10789] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10789] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10787] <... futex resumed>) = 0 [pid 10789] <... futex resumed>) = 1 [pid 10787] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10789] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10787] <... futex resumed>) = 0 [pid 10789] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10787] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10789] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10787] <... futex resumed>) = 0 [pid 10789] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10788] <... write resumed>) = 262144 [pid 10788] munmap(0x7f5527ca1000, 262144) = 0 [pid 10788] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10788] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10788] close(4) = 0 [pid 10788] mkdir("./file1", 0777) = 0 [pid 10788] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10788] ioctl(6, LOOP_CLR_FD) = 0 [pid 10788] close(6) = 0 [pid 10788] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10788] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10787] exit_group(0 [pid 10788] <... futex resumed>) = ? [pid 10787] <... exit_group resumed>) = ? [pid 10788] +++ exited with 0 +++ [pid 10789] <... futex resumed>) = ? [pid 10789] +++ exited with 0 +++ [pid 10787] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10787, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] umount2("./1261", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1261/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1261/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1261/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1261/bus") = 0 [pid 5052] umount2("./1261/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1261/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1261/binderfs") = 0 [pid 5052] umount2("./1261/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1261/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1261/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 279.274326][T10788] loop0: detected capacity change from 0 to 512 [ 279.285195][T10788] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "./1261/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1261/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1261") = 0 [pid 5052] mkdir("./1262", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10790 attached , child_tidptr=0x555556d60690) = 10790 [pid 10790] set_robust_list(0x555556d606a0, 24) = 0 [pid 10790] chdir("./1262") = 0 [pid 10790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10790] setpgid(0, 0) = 0 [pid 10790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10790] write(3, "1000", 4) = 4 [pid 10790] close(3) = 0 [pid 10790] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10790] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10790] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10790] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10790] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10790] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10791 attached => {parent_tid=[10791]}, 88) = 10791 [pid 10791] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10791] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10791] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10791] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10790] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10790] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10791] <... futex resumed>) = 0 [pid 10791] memfd_create("syzkaller", 0 [pid 10790] <... futex resumed>) = 1 [pid 10790] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10791] <... memfd_create resumed>) = 3 [pid 10790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10790] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10790] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10791] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10792 attached [pid 10792] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10790] <... clone3 resumed> => {parent_tid=[10792]}, 88) = 10792 [pid 10792] <... rseq resumed>) = 0 [pid 10790] rt_sigprocmask(SIG_SETMASK, [], [pid 10792] set_robust_list(0x7f55300c19a0, 24 [pid 10790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10792] <... set_robust_list resumed>) = 0 [pid 10790] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10792] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10790] <... futex resumed>) = 0 [pid 10792] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10790] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10792] <... open resumed>) = 4 [pid 10792] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10790] <... futex resumed>) = 0 [pid 10790] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10790] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10792] <... futex resumed>) = 1 [pid 10792] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10792] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10790] <... futex resumed>) = 0 [pid 10792] <... futex resumed>) = 1 [pid 10790] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10792] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10790] <... futex resumed>) = 0 [pid 10790] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10792] <... open resumed>) = 5 [pid 10792] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10790] <... futex resumed>) = 0 [pid 10792] <... futex resumed>) = 1 [pid 10790] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10792] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10790] <... futex resumed>) = 0 [pid 10792] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10790] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10792] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10792] <... futex resumed>) = 0 [pid 10792] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10791] <... write resumed>) = 262144 [pid 10791] munmap(0x7f5527ca1000, 262144) = 0 [pid 10791] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10791] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10791] close(3) = 0 [pid 10791] mkdir("./file1", 0777) = 0 [pid 10791] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10791] ioctl(6, LOOP_CLR_FD) = 0 [pid 10791] close(6) = 0 [pid 10791] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10790] exit_group(0 [pid 10791] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10792] <... futex resumed>) = ? [pid 10791] <... futex resumed>) = ? [pid 10790] <... exit_group resumed>) = ? [pid 10792] +++ exited with 0 +++ [pid 10791] +++ exited with 0 +++ [pid 10790] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10790, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1262", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1262/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1262/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1262/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1262/bus") = 0 [pid 5052] umount2("./1262/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1262/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1262/binderfs") = 0 [pid 5052] umount2("./1262/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1262/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1262/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1262/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1262/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 279.400992][T10791] loop0: detected capacity change from 0 to 512 [ 279.410756][T10791] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1262") = 0 [pid 5052] mkdir("./1263", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10793 attached , child_tidptr=0x555556d60690) = 10793 [pid 10793] set_robust_list(0x555556d606a0, 24) = 0 [pid 10793] chdir("./1263") = 0 [pid 10793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10793] setpgid(0, 0) = 0 [pid 10793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10793] write(3, "1000", 4) = 4 [pid 10793] close(3) = 0 [pid 10793] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10793] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10793] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10793] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10793] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10793] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10794 attached => {parent_tid=[10794]}, 88) = 10794 [pid 10793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10793] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10793] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10793] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10794] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10793] <... mprotect resumed>) = 0 [pid 10793] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10794] <... rseq resumed>) = 0 [pid 10794] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10794] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10795 attached NULL, 8) = 0 [pid 10793] <... clone3 resumed> => {parent_tid=[10795]}, 88) = 10795 [pid 10793] rt_sigprocmask(SIG_SETMASK, [], [pid 10795] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10794] memfd_create("syzkaller", 0 [pid 10793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10795] <... rseq resumed>) = 0 [pid 10793] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10795] set_robust_list(0x7f55300c19a0, 24 [pid 10793] <... futex resumed>) = 0 [pid 10795] <... set_robust_list resumed>) = 0 [pid 10793] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10794] <... memfd_create resumed>) = 3 [pid 10795] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10795] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10795] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10793] <... futex resumed>) = 0 [pid 10795] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10793] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10793] <... futex resumed>) = 0 [pid 10795] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10793] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10795] <... mount resumed>) = 0 [pid 10794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10795] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10795] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10793] <... futex resumed>) = 0 [pid 10794] <... mmap resumed>) = 0x7f5527ca1000 [pid 10793] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10795] <... futex resumed>) = 0 [pid 10793] <... futex resumed>) = 1 [pid 10795] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10793] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10795] <... open resumed>) = 5 [pid 10795] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10793] <... futex resumed>) = 0 [pid 10795] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10793] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10795] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10793] <... futex resumed>) = 0 [pid 10795] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10793] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10795] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10795] <... futex resumed>) = 0 [pid 10795] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10794] munmap(0x7f5527ca1000, 262144) = 0 [pid 10794] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10794] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10794] close(3) = 0 [pid 10794] mkdir("./file1", 0777) = 0 [pid 10794] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10794] ioctl(6, LOOP_CLR_FD) = 0 [pid 10794] close(6) = 0 [pid 10794] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10794] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10793] exit_group(0 [pid 10795] <... futex resumed>) = ? [pid 10794] <... futex resumed>) = ? [pid 10793] <... exit_group resumed>) = ? [pid 10794] +++ exited with 0 +++ [pid 10795] +++ exited with 0 +++ [pid 10793] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10793, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1263", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1263/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1263/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1263/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1263/bus") = 0 [pid 5052] umount2("./1263/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1263/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1263/binderfs") = 0 [pid 5052] umount2("./1263/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1263/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1263/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1263/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1263/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1263") = 0 [pid 5052] mkdir("./1264", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10796 ./strace-static-x86_64: Process 10796 attached [pid 10796] set_robust_list(0x555556d606a0, 24) = 0 [ 279.515695][T10794] loop0: detected capacity change from 0 to 512 [ 279.525058][T10794] ext4: Unknown parameter 'nouser_xattr' [pid 10796] chdir("./1264") = 0 [pid 10796] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10796] setpgid(0, 0) = 0 [pid 10796] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10796] write(3, "1000", 4) = 4 [pid 10796] close(3) = 0 [pid 10796] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10796] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10796] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10796] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10796] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10796] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10796] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10796] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10797 attached [pid 10797] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10796] <... clone3 resumed> => {parent_tid=[10797]}, 88) = 10797 [pid 10797] <... rseq resumed>) = 0 [pid 10796] rt_sigprocmask(SIG_SETMASK, [], [pid 10797] set_robust_list(0x7f55300e29a0, 24 [pid 10796] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10797] <... set_robust_list resumed>) = 0 [pid 10796] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10797] rt_sigprocmask(SIG_SETMASK, [], [pid 10796] <... futex resumed>) = 0 [pid 10797] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10796] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10797] memfd_create("syzkaller", 0 [pid 10796] <... futex resumed>) = 0 [pid 10796] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10796] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10797] <... memfd_create resumed>) = 3 [pid 10797] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10796] <... mprotect resumed>) = 0 [pid 10797] <... mmap resumed>) = 0x7f5527ca1000 [pid 10796] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10796] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10798 attached [pid 10798] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10797] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10796] <... clone3 resumed> => {parent_tid=[10798]}, 88) = 10798 [pid 10798] <... rseq resumed>) = 0 [pid 10797] <... write resumed>) = 262144 [pid 10796] rt_sigprocmask(SIG_SETMASK, [], [pid 10798] set_robust_list(0x7f55300c19a0, 24 [pid 10796] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10798] <... set_robust_list resumed>) = 0 [pid 10796] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10798] rt_sigprocmask(SIG_SETMASK, [], [pid 10796] <... futex resumed>) = 0 [pid 10798] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10796] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10798] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10797] munmap(0x7f5527ca1000, 262144 [pid 10798] <... open resumed>) = 4 [pid 10798] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10796] <... futex resumed>) = 0 [pid 10798] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10796] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10796] <... futex resumed>) = 0 [pid 10798] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10796] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10797] <... munmap resumed>) = 0 [pid 10798] <... mount resumed>) = 0 [pid 10797] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10798] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10796] <... futex resumed>) = 0 [pid 10796] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10798] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10796] <... futex resumed>) = 0 [pid 10798] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10796] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10798] <... futex resumed>) = 0 [pid 10796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10798] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10796] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10797] ioctl(5, LOOP_SET_FD, 3 [pid 10796] <... futex resumed>) = 0 [pid 10798] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10796] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10798] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10798] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10796] <... futex resumed>) = 0 [pid 10798] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10797] <... ioctl resumed>) = 0 [pid 10797] close(3) = 0 [pid 10797] mkdir("./file1", 0777) = 0 [pid 10797] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10797] ioctl(5, LOOP_CLR_FD) = 0 [pid 10797] close(5) = 0 [pid 10797] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10797] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10796] exit_group(0 [pid 10798] <... futex resumed>) = ? [pid 10797] <... futex resumed>) = ? [pid 10796] <... exit_group resumed>) = ? [pid 10798] +++ exited with 0 +++ [pid 10797] +++ exited with 0 +++ [pid 10796] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10796, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1264", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1264/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1264/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1264/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1264/bus") = 0 [pid 5052] umount2("./1264/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1264/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1264/binderfs") = 0 [pid 5052] umount2("./1264/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 279.626803][T10797] loop0: detected capacity change from 0 to 512 [ 279.639433][T10797] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1264/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1264/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1264/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1264/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1264") = 0 [pid 5052] mkdir("./1265", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10799 attached , child_tidptr=0x555556d60690) = 10799 [pid 10799] set_robust_list(0x555556d606a0, 24) = 0 [pid 10799] chdir("./1265") = 0 [pid 10799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10799] setpgid(0, 0) = 0 [pid 10799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10799] write(3, "1000", 4) = 4 [pid 10799] close(3) = 0 [pid 10799] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10799] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10799] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10799] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10799] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10799] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10799] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10800 attached [pid 10800] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10800] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10799] <... clone3 resumed> => {parent_tid=[10800]}, 88) = 10800 [pid 10800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10799] rt_sigprocmask(SIG_SETMASK, [], [pid 10800] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10799] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10799] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10800] <... futex resumed>) = 0 [pid 10800] memfd_create("syzkaller", 0 [pid 10799] <... futex resumed>) = 1 [pid 10799] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10800] <... memfd_create resumed>) = 3 [pid 10799] <... futex resumed>) = 0 [pid 10799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10799] <... mmap resumed>) = 0x7f55300a1000 [pid 10800] <... mmap resumed>) = 0x7f5527ca1000 [pid 10799] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10799] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10799] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10801 attached [pid 10801] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10801] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10799] <... clone3 resumed> => {parent_tid=[10801]}, 88) = 10801 [pid 10801] rt_sigprocmask(SIG_SETMASK, [], [pid 10799] rt_sigprocmask(SIG_SETMASK, [], [pid 10801] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10799] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10801] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10799] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10801] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10801] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10799] <... futex resumed>) = 0 [pid 10801] <... open resumed>) = 4 [pid 10799] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10801] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10799] <... futex resumed>) = 0 [pid 10799] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10799] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10801] <... futex resumed>) = 1 [pid 10801] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10801] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10799] <... futex resumed>) = 0 [pid 10799] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10801] <... futex resumed>) = 1 [pid 10799] <... futex resumed>) = 0 [pid 10801] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10799] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10801] <... open resumed>) = 5 [pid 10800] <... write resumed>) = 262144 [pid 10800] munmap(0x7f5527ca1000, 262144 [pid 10801] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10799] <... futex resumed>) = 0 [pid 10801] <... futex resumed>) = 1 [pid 10799] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10801] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10799] <... futex resumed>) = 0 [pid 10801] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10799] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10801] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10801] <... futex resumed>) = 0 [pid 10800] <... munmap resumed>) = 0 [pid 10801] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10800] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10800] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10800] close(3) = 0 [pid 10800] mkdir("./file1", 0777) = 0 [pid 10800] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10800] ioctl(6, LOOP_CLR_FD) = 0 [pid 10800] close(6) = 0 [pid 10800] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10800] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10799] exit_group(0 [pid 10801] <... futex resumed>) = ? [pid 10800] <... futex resumed>) = ? [pid 10799] <... exit_group resumed>) = ? [pid 10800] +++ exited with 0 +++ [pid 10801] +++ exited with 0 +++ [pid 10799] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10799, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1265", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1265/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1265/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1265/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1265/bus") = 0 [pid 5052] umount2("./1265/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1265/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1265/binderfs") = 0 [pid 5052] umount2("./1265/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1265/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1265/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1265/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1265/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1265") = 0 [pid 5052] mkdir("./1266", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 279.745996][T10800] loop0: detected capacity change from 0 to 512 [ 279.755727][T10800] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10802 attached , child_tidptr=0x555556d60690) = 10802 [pid 10802] set_robust_list(0x555556d606a0, 24) = 0 [pid 10802] chdir("./1266") = 0 [pid 10802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10802] setpgid(0, 0) = 0 [pid 10802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10802] write(3, "1000", 4) = 4 [pid 10802] close(3) = 0 [pid 10802] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10802] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10802] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10802] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10802] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10802] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10802] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10803]}, 88) = 10803 [pid 10802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10802] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10802] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10802] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10802] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10802] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10804 attached [pid 10804] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10802] <... clone3 resumed> => {parent_tid=[10804]}, 88) = 10804 [pid 10804] set_robust_list(0x7f55300c19a0, 24 [pid 10802] rt_sigprocmask(SIG_SETMASK, [], [pid 10804] <... set_robust_list resumed>) = 0 [pid 10802] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10804] rt_sigprocmask(SIG_SETMASK, [], [pid 10802] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10802] <... futex resumed>) = 0 [pid 10804] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10802] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10804] <... open resumed>) = 3 [pid 10804] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10802] <... futex resumed>) = 0 [pid 10804] <... futex resumed>) = 1 [pid 10802] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10804] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10802] <... futex resumed>) = 0 ./strace-static-x86_64: Process 10803 attached [pid 10804] <... mount resumed>) = 0 [pid 10802] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10804] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10803] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10802] <... futex resumed>) = 0 [pid 10804] <... futex resumed>) = 1 [pid 10803] set_robust_list(0x7f55300e29a0, 24 [pid 10802] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10804] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10803] <... set_robust_list resumed>) = 0 [pid 10802] <... futex resumed>) = 0 [pid 10804] <... open resumed>) = 4 [pid 10803] rt_sigprocmask(SIG_SETMASK, [], [pid 10802] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10804] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10803] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10804] <... futex resumed>) = 1 [pid 10803] memfd_create("syzkaller", 0 [pid 10802] <... futex resumed>) = 0 [pid 10804] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10802] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10803] <... memfd_create resumed>) = 5 [pid 10804] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10802] <... futex resumed>) = 0 [pid 10804] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10802] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10804] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10803] <... mmap resumed>) = 0x7f5527ca1000 [pid 10802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10803] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10803] munmap(0x7f5527ca1000, 262144) = 0 [pid 10803] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10803] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 10803] close(5) = 0 [pid 10803] mkdir("./file1", 0777) = 0 [pid 10803] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10803] ioctl(6, LOOP_CLR_FD) = 0 [pid 10803] close(6) = 0 [pid 10803] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10803] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10802] exit_group(0 [pid 10804] <... futex resumed>) = ? [pid 10803] <... futex resumed>) = ? [pid 10802] <... exit_group resumed>) = ? [pid 10804] +++ exited with 0 +++ [pid 10803] +++ exited with 0 +++ [pid 10802] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10802, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1266", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1266/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1266/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1266/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1266/bus") = 0 [pid 5052] umount2("./1266/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1266/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1266/binderfs") = 0 [pid 5052] umount2("./1266/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1266/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1266/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1266/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1266/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1266") = 0 [pid 5052] mkdir("./1267", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = 0 [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10805 attached , child_tidptr=0x555556d60690) = 10805 [pid 10805] set_robust_list(0x555556d606a0, 24) = 0 [pid 10805] chdir("./1267") = 0 [pid 10805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10805] setpgid(0, 0) = 0 [pid 10805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10805] write(3, "1000", 4) = 4 [pid 10805] close(3) = 0 [pid 10805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10805] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10805] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10805] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10805] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [ 279.842471][T10803] loop0: detected capacity change from 0 to 512 [ 279.852875][T10803] ext4: Unknown parameter 'nouser_xattr' [pid 10805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10806 attached => {parent_tid=[10806]}, 88) = 10806 [pid 10806] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10805] rt_sigprocmask(SIG_SETMASK, [], [pid 10806] set_robust_list(0x7f55300e29a0, 24 [pid 10805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10806] <... set_robust_list resumed>) = 0 [pid 10806] rt_sigprocmask(SIG_SETMASK, [], [pid 10805] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10805] <... futex resumed>) = 0 [pid 10806] memfd_create("syzkaller", 0 [pid 10805] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10806] <... memfd_create resumed>) = 3 [pid 10805] <... mmap resumed>) = 0x7f55300a1000 [pid 10806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10805] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10805] <... mprotect resumed>) = 0 [pid 10805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10807]}, 88) = 10807 [pid 10805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10805] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10805] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10807 attached [pid 10806] <... write resumed>) = 262144 [pid 10806] munmap(0x7f5527ca1000, 262144 [pid 10807] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10806] <... munmap resumed>) = 0 [pid 10806] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10807] <... rseq resumed>) = 0 [pid 10807] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10807] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10807] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10806] <... openat resumed>) = 4 [pid 10806] ioctl(4, LOOP_SET_FD, 3 [pid 10807] <... open resumed>) = 5 [pid 10807] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10807] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10805] <... futex resumed>) = 0 [pid 10805] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10807] <... futex resumed>) = 0 [pid 10807] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10807] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10807] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10805] <... futex resumed>) = 1 [pid 10805] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10805] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10807] <... futex resumed>) = 0 [pid 10807] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10807] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10807] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10806] <... ioctl resumed>) = 0 [pid 10805] <... futex resumed>) = 1 [pid 10806] close(3 [pid 10805] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10806] <... close resumed>) = 0 [pid 10806] mkdir("./file1", 0777 [pid 10805] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10806] <... mkdir resumed>) = 0 [pid 10805] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10805] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10806] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10807] <... futex resumed>) = 0 [pid 10807] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10806] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10806] ioctl(4, LOOP_CLR_FD) = 0 [pid 10806] close(4) = 0 [pid 10806] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10806] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10807] <... write resumed>) = 262144 [pid 10807] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10807] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10805] <... futex resumed>) = 0 [pid 10805] exit_group(0 [pid 10806] <... futex resumed>) = ? [pid 10805] <... exit_group resumed>) = ? [pid 10807] <... futex resumed>) = ? [pid 10807] +++ exited with 0 +++ [pid 10806] +++ exited with 0 +++ [pid 10805] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10805, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1267", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1267/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1267/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1267/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1267/bus") = 0 [pid 5052] umount2("./1267/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1267/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1267/binderfs") = 0 [pid 5052] umount2("./1267/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1267/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1267/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1267/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1267/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1267") = 0 [ 279.921393][T10806] loop0: detected capacity change from 0 to 512 [ 279.932880][T10806] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1268", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10808 attached , child_tidptr=0x555556d60690) = 10808 [pid 10808] set_robust_list(0x555556d606a0, 24) = 0 [pid 10808] chdir("./1268") = 0 [pid 10808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10808] setpgid(0, 0) = 0 [pid 10808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10808] write(3, "1000", 4) = 4 [pid 10808] close(3) = 0 [pid 10808] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10808] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10808] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10808] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10808] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10808] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10808] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10809 attached [pid 10809] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10808] <... clone3 resumed> => {parent_tid=[10809]}, 88) = 10809 [pid 10809] set_robust_list(0x7f55300e29a0, 24 [pid 10808] rt_sigprocmask(SIG_SETMASK, [], [pid 10809] <... set_robust_list resumed>) = 0 [pid 10808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10809] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10808] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10809] memfd_create("syzkaller", 0 [pid 10808] <... futex resumed>) = 0 [pid 10809] <... memfd_create resumed>) = 3 [pid 10809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10808] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5527ca1000 [pid 10808] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10808] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10808] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10810 attached [pid 10810] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10808] <... clone3 resumed> => {parent_tid=[10810]}, 88) = 10810 [pid 10810] <... rseq resumed>) = 0 [pid 10810] set_robust_list(0x7f5527cc19a0, 24 [pid 10808] rt_sigprocmask(SIG_SETMASK, [], [pid 10810] <... set_robust_list resumed>) = 0 [pid 10808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10808] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10808] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10809] <... write resumed>) = 262144 [pid 10810] rt_sigprocmask(SIG_SETMASK, [], [pid 10809] munmap(0x7f5527cc2000, 262144 [pid 10810] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10810] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10810] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10809] <... munmap resumed>) = 0 [pid 10809] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10809] ioctl(5, LOOP_SET_FD, 3 [pid 10810] <... futex resumed>) = 1 [pid 10808] <... futex resumed>) = 0 [pid 10810] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10808] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10810] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10808] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10809] <... ioctl resumed>) = 0 [pid 10809] close(3) = 0 [pid 10809] mkdir("./file1", 0777) = 0 [pid 10809] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10810] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10810] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10810] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10809] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10808] <... futex resumed>) = 0 [pid 10809] ioctl(5, LOOP_CLR_FD [pid 10808] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10809] <... ioctl resumed>) = 0 [pid 10808] <... futex resumed>) = 1 [pid 10808] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10809] close(5 [pid 10810] <... futex resumed>) = 0 [pid 10809] <... close resumed>) = 0 [pid 10810] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10809] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10809] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10810] <... open resumed>) = 3 [pid 10810] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10808] <... futex resumed>) = 0 [pid 10810] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10808] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10809] <... futex resumed>) = 0 [pid 10808] <... futex resumed>) = 1 [pid 10809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10808] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10809] <... write resumed>) = 262144 [pid 10809] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10808] <... futex resumed>) = 0 [pid 10809] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10808] exit_group(0) = ? [pid 10810] <... futex resumed>) = ? [pid 10809] <... futex resumed>) = ? [pid 10810] +++ exited with 0 +++ [ 280.024485][T10809] loop0: detected capacity change from 0 to 512 [ 280.035853][T10809] ext4: Unknown parameter 'nouser_xattr' [pid 10809] +++ exited with 0 +++ [pid 10808] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10808, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1268", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1268/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1268/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1268/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1268/bus") = 0 [pid 5052] umount2("./1268/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1268/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1268/binderfs") = 0 [pid 5052] umount2("./1268/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1268/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1268/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1268/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1268/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1268") = 0 [pid 5052] mkdir("./1269", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10811 attached , child_tidptr=0x555556d60690) = 10811 [pid 10811] set_robust_list(0x555556d606a0, 24) = 0 [pid 10811] chdir("./1269") = 0 [pid 10811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10811] setpgid(0, 0) = 0 [pid 10811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10811] write(3, "1000", 4) = 4 [pid 10811] close(3) = 0 [pid 10811] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10811] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10811] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10811] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10811] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10811] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10812 attached [pid 10812] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10811] <... clone3 resumed> => {parent_tid=[10812]}, 88) = 10812 [pid 10812] set_robust_list(0x7f55300e29a0, 24 [pid 10811] rt_sigprocmask(SIG_SETMASK, [], [pid 10812] <... set_robust_list resumed>) = 0 [pid 10811] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10811] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10812] memfd_create("syzkaller", 0 [pid 10811] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10812] <... memfd_create resumed>) = 3 [pid 10811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10811] <... mmap resumed>) = 0x7f5527ca1000 [pid 10811] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10811] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10812] <... write resumed>) = 262144 [pid 10811] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0} [pid 10812] munmap(0x7f5527cc2000, 262144./strace-static-x86_64: Process 10813 attached [pid 10813] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053) = 0 [pid 10813] set_robust_list(0x7f5527cc19a0, 24) = 0 [pid 10813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10813] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10812] <... munmap resumed>) = 0 [pid 10811] <... clone3 resumed> => {parent_tid=[10813]}, 88) = 10813 [pid 10812] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10812] ioctl(4, LOOP_SET_FD, 3 [pid 10811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10811] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10811] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10813] <... futex resumed>) = 0 [pid 10813] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 10813] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10812] <... ioctl resumed>) = 0 [pid 10812] close(3) = 0 [pid 10812] mkdir("./file1", 0777 [pid 10813] <... futex resumed>) = 1 [pid 10812] <... mkdir resumed>) = 0 [pid 10811] <... futex resumed>) = 0 [pid 10811] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10813] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10811] <... futex resumed>) = 0 [pid 10812] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10813] <... mount resumed>) = 0 [pid 10811] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10813] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10811] <... futex resumed>) = 0 [pid 10811] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10813] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10811] <... futex resumed>) = 0 [pid 10813] <... open resumed>) = 3 [pid 10811] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10813] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10813] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10811] <... futex resumed>) = 0 [pid 10811] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10813] <... futex resumed>) = 0 [pid 10813] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10812] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10811] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10812] ioctl(4, LOOP_CLR_FD) = 0 [pid 10812] close(4) = 0 [pid 10812] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10812] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10813] <... write resumed>) = 262144 [pid 10813] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10811] <... futex resumed>) = 0 [pid 10813] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10811] exit_group(0 [pid 10813] <... futex resumed>) = ? [pid 10811] <... exit_group resumed>) = ? [pid 10813] +++ exited with 0 +++ [pid 10812] <... futex resumed>) = ? [pid 10812] +++ exited with 0 +++ [pid 10811] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10811, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1269", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1269/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1269/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1269/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1269/bus") = 0 [pid 5052] umount2("./1269/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1269/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1269/binderfs") = 0 [pid 5052] umount2("./1269/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1269/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1269/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1269/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1269/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 280.159278][T10812] loop0: detected capacity change from 0 to 512 [ 280.168847][T10812] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1269") = 0 [pid 5052] mkdir("./1270", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10814 attached , child_tidptr=0x555556d60690) = 10814 [pid 10814] set_robust_list(0x555556d606a0, 24) = 0 [pid 10814] chdir("./1270") = 0 [pid 10814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10814] setpgid(0, 0) = 0 [pid 10814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10814] write(3, "1000", 4) = 4 [pid 10814] close(3) = 0 [pid 10814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10814] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10814] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10814] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10815 attached => {parent_tid=[10815]}, 88) = 10815 [pid 10815] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10814] rt_sigprocmask(SIG_SETMASK, [], [pid 10815] set_robust_list(0x7f55300e29a0, 24 [pid 10814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10814] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10814] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10815] <... set_robust_list resumed>) = 0 [pid 10815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10815] memfd_create("syzkaller", 0 [pid 10814] <... mmap resumed>) = 0x7f55300a1000 [pid 10815] <... memfd_create resumed>) = 3 [pid 10814] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10814] <... mprotect resumed>) = 0 [pid 10814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10816 attached [pid 10815] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10814] <... clone3 resumed> => {parent_tid=[10816]}, 88) = 10816 [pid 10816] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10814] rt_sigprocmask(SIG_SETMASK, [], [pid 10816] <... rseq resumed>) = 0 [pid 10814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10816] set_robust_list(0x7f55300c19a0, 24 [pid 10814] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10816] <... set_robust_list resumed>) = 0 [pid 10814] <... futex resumed>) = 0 [pid 10814] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10816] rt_sigprocmask(SIG_SETMASK, [], [pid 10815] <... write resumed>) = 262144 [pid 10815] munmap(0x7f5527ca1000, 262144 [pid 10816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10816] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10815] <... munmap resumed>) = 0 [pid 10815] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10815] ioctl(5, LOOP_SET_FD, 3 [pid 10816] <... open resumed>) = 4 [pid 10816] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10814] <... futex resumed>) = 0 [pid 10814] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10814] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10816] <... futex resumed>) = 1 [pid 10815] <... ioctl resumed>) = 0 [pid 10816] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10815] close(3) = 0 [pid 10815] mkdir("./file1", 0777 [pid 10816] <... mount resumed>) = 0 [pid 10816] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10815] <... mkdir resumed>) = 0 [pid 10815] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10816] <... futex resumed>) = 1 [pid 10814] <... futex resumed>) = 0 [pid 10814] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10816] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10814] <... futex resumed>) = 0 [pid 10814] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10816] <... open resumed>) = 3 [pid 10816] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10814] <... futex resumed>) = 0 [pid 10814] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10814] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10816] <... futex resumed>) = 1 [pid 10816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10815] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10815] ioctl(5, LOOP_CLR_FD) = 0 [pid 10815] close(5) = 0 [pid 10815] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10815] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10816] <... write resumed>) = 262144 [pid 10816] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10814] <... futex resumed>) = 0 [pid 10816] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10814] exit_group(0 [pid 10815] <... futex resumed>) = ? [pid 10814] <... exit_group resumed>) = ? [pid 10815] +++ exited with 0 +++ [pid 10816] <... futex resumed>) = ? [pid 10816] +++ exited with 0 +++ [pid 10814] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10814, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1270", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1270/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1270/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1270/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1270/bus") = 0 [pid 5052] umount2("./1270/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1270/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1270/binderfs") = 0 [pid 5052] umount2("./1270/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1270/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1270/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1270/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 280.260693][T10815] loop0: detected capacity change from 0 to 512 [ 280.271129][T10815] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1270/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1270") = 0 [pid 5052] mkdir("./1271", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10817 attached , child_tidptr=0x555556d60690) = 10817 [pid 10817] set_robust_list(0x555556d606a0, 24) = 0 [pid 10817] chdir("./1271") = 0 [pid 10817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10817] setpgid(0, 0) = 0 [pid 10817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10817] write(3, "1000", 4) = 4 [pid 10817] close(3) = 0 [pid 10817] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10817] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10817] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10817] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10817] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10817] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10818]}, 88) = 10818 [pid 10817] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10817] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10817] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10817] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10817] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10819 attached [pid 10819] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10817] <... clone3 resumed> => {parent_tid=[10819]}, 88) = 10819 [pid 10819] <... rseq resumed>) = 0 [pid 10817] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10819] set_robust_list(0x7f55300c19a0, 24 [pid 10817] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10819] <... set_robust_list resumed>) = 0 [pid 10817] <... futex resumed>) = 0 [pid 10819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10817] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10818 attached [pid 10819] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10818] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10818] set_robust_list(0x7f55300e29a0, 24 [pid 10819] <... open resumed>) = 3 [pid 10818] <... set_robust_list resumed>) = 0 [pid 10818] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10818] memfd_create("syzkaller", 0 [pid 10819] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10818] <... memfd_create resumed>) = 4 [pid 10817] <... futex resumed>) = 0 [pid 10818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10819] <... futex resumed>) = 1 [pid 10817] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10819] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10817] <... futex resumed>) = 0 [pid 10818] <... mmap resumed>) = 0x7f5527ca1000 [pid 10819] <... mount resumed>) = 0 [pid 10817] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10819] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10817] <... futex resumed>) = 0 [pid 10819] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10817] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10819] <... open resumed>) = 5 [pid 10818] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10817] <... futex resumed>) = 0 [pid 10817] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10819] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10817] <... futex resumed>) = 0 [pid 10819] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10817] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10819] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10817] <... futex resumed>) = 0 [pid 10819] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10817] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10819] <... futex resumed>) = 0 [pid 10817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10819] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10818] <... write resumed>) = 262144 [pid 10818] munmap(0x7f5527ca1000, 262144) = 0 [pid 10818] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10818] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10818] close(4) = 0 [pid 10818] mkdir("./file1", 0777) = 0 [pid 10818] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10818] ioctl(6, LOOP_CLR_FD) = 0 [pid 10818] close(6) = 0 [pid 10818] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10817] exit_group(0 [pid 10819] <... futex resumed>) = ? [pid 10818] <... futex resumed>) = ? [pid 10817] <... exit_group resumed>) = ? [pid 10819] +++ exited with 0 +++ [pid 10818] +++ exited with 0 +++ [pid 10817] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10817, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1271", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1271/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1271/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1271/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1271/bus") = 0 [pid 5052] umount2("./1271/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1271/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1271/binderfs") = 0 [pid 5052] umount2("./1271/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1271/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1271/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1271/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1271/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1271") = 0 [pid 5052] mkdir("./1272", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 280.381256][T10818] loop0: detected capacity change from 0 to 512 [ 280.390607][T10818] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10820 attached , child_tidptr=0x555556d60690) = 10820 [pid 10820] set_robust_list(0x555556d606a0, 24) = 0 [pid 10820] chdir("./1272") = 0 [pid 10820] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10820] setpgid(0, 0) = 0 [pid 10820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10820] write(3, "1000", 4) = 4 [pid 10820] close(3) = 0 [pid 10820] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10820] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10820] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10820] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10820] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10820] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10820] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10820] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10821]}, 88) = 10821 ./strace-static-x86_64: Process 10821 attached [pid 10820] rt_sigprocmask(SIG_SETMASK, [], [pid 10821] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10821] <... rseq resumed>) = 0 [pid 10820] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10821] set_robust_list(0x7f55300e29a0, 24 [pid 10820] <... futex resumed>) = 0 [pid 10821] <... set_robust_list resumed>) = 0 [pid 10820] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10820] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10820] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10820] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10821] rt_sigprocmask(SIG_SETMASK, [], [pid 10820] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10822]}, 88) = 10822 ./strace-static-x86_64: Process 10822 attached [pid 10821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10820] rt_sigprocmask(SIG_SETMASK, [], [pid 10822] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10822] <... rseq resumed>) = 0 [pid 10821] memfd_create("syzkaller", 0 [pid 10820] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10822] set_robust_list(0x7f55300c19a0, 24 [pid 10821] <... memfd_create resumed>) = 3 [pid 10820] <... futex resumed>) = 0 [pid 10822] <... set_robust_list resumed>) = 0 [pid 10822] rt_sigprocmask(SIG_SETMASK, [], [pid 10821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10820] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10821] <... mmap resumed>) = 0x7f5527ca1000 [pid 10822] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10822] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10820] <... futex resumed>) = 0 [pid 10822] <... futex resumed>) = 1 [pid 10820] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10822] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10820] <... futex resumed>) = 0 [pid 10820] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10822] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10820] <... futex resumed>) = 0 [pid 10822] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10820] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10822] <... futex resumed>) = 0 [pid 10820] <... futex resumed>) = 1 [pid 10822] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10820] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10822] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10821] <... write resumed>) = 262144 [pid 10820] <... futex resumed>) = 0 [pid 10822] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10820] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10822] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10820] <... futex resumed>) = 0 [pid 10822] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10820] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10822] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10821] munmap(0x7f5527ca1000, 262144) = 0 [pid 10821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10821] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10821] close(3) = 0 [pid 10821] mkdir("./file1", 0777) = 0 [pid 10821] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10821] ioctl(6, LOOP_CLR_FD) = 0 [pid 10821] close(6) = 0 [pid 10821] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10821] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10820] exit_group(0) = ? [pid 10822] <... futex resumed>) = ? [pid 10822] +++ exited with 0 +++ [pid 10821] <... futex resumed>) = ? [pid 10821] +++ exited with 0 +++ [pid 10820] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10820, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1272", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1272/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1272/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1272/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1272/bus") = 0 [pid 5052] umount2("./1272/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1272/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1272/binderfs") = 0 [pid 5052] umount2("./1272/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1272/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1272/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1272/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1272/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1272") = 0 [pid 5052] mkdir("./1273", 0777) = 0 [ 280.498890][T10821] loop0: detected capacity change from 0 to 512 [ 280.511483][T10821] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10823 attached , child_tidptr=0x555556d60690) = 10823 [pid 10823] set_robust_list(0x555556d606a0, 24) = 0 [pid 10823] chdir("./1273") = 0 [pid 10823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10823] setpgid(0, 0) = 0 [pid 10823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10823] write(3, "1000", 4) = 4 [pid 10823] close(3) = 0 [pid 10823] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10823] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10823] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10823] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10823] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10823] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10823] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10824]}, 88) = 10824 ./strace-static-x86_64: Process 10824 attached [pid 10823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10823] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10823] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10823] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10824] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10823] <... mprotect resumed>) = 0 [pid 10823] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10823] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10825 attached [pid 10825] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10825] set_robust_list(0x7f55300c19a0, 24 [pid 10823] <... clone3 resumed> => {parent_tid=[10825]}, 88) = 10825 [pid 10825] <... set_robust_list resumed>) = 0 [pid 10823] rt_sigprocmask(SIG_SETMASK, [], [pid 10825] rt_sigprocmask(SIG_SETMASK, [], [pid 10823] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10823] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10825] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10823] <... futex resumed>) = 0 [pid 10825] <... open resumed>) = 3 [pid 10823] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10824] <... rseq resumed>) = 0 [pid 10824] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10824] memfd_create("syzkaller", 0 [pid 10825] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10824] <... memfd_create resumed>) = 4 [pid 10825] <... futex resumed>) = 1 [pid 10824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10823] <... futex resumed>) = 0 [pid 10825] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10823] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10824] <... mmap resumed>) = 0x7f5527ca1000 [pid 10823] <... futex resumed>) = 0 [pid 10825] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10823] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10825] <... mount resumed>) = 0 [pid 10825] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10823] <... futex resumed>) = 0 [pid 10823] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10823] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10824] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10825] <... futex resumed>) = 1 [pid 10825] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10825] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10823] <... futex resumed>) = 0 [pid 10825] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10823] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10825] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10823] <... futex resumed>) = 0 [pid 10825] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10823] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10825] <... futex resumed>) = 0 [pid 10825] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10824] <... write resumed>) = 262144 [pid 10824] munmap(0x7f5527ca1000, 262144) = 0 [pid 10824] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10824] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10824] close(4) = 0 [pid 10824] mkdir("./file1", 0777) = 0 [pid 10824] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10824] ioctl(6, LOOP_CLR_FD) = 0 [pid 10824] close(6) = 0 [pid 10824] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10823] exit_group(0 [pid 10825] <... futex resumed>) = ? [pid 10823] <... exit_group resumed>) = ? [pid 10825] +++ exited with 0 +++ [pid 10824] +++ exited with 0 +++ [pid 10823] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10823, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1273", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1273/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1273/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1273/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1273/bus") = 0 [pid 5052] umount2("./1273/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1273/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1273/binderfs") = 0 [pid 5052] umount2("./1273/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1273/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1273/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1273/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1273/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1273") = 0 [pid 5052] mkdir("./1274", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10826 attached , child_tidptr=0x555556d60690) = 10826 [pid 10826] set_robust_list(0x555556d606a0, 24) = 0 [pid 10826] chdir("./1274") = 0 [pid 10826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10826] setpgid(0, 0) = 0 [pid 10826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10826] write(3, "1000", 4) = 4 [pid 10826] close(3) = 0 [pid 10826] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10826] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10826] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10826] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10826] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10826] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10826] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10827 attached [pid 10827] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10826] <... clone3 resumed> => {parent_tid=[10827]}, 88) = 10827 [pid 10827] <... rseq resumed>) = 0 [pid 10826] rt_sigprocmask(SIG_SETMASK, [], [pid 10827] set_robust_list(0x7f55300e29a0, 24 [pid 10826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10827] <... set_robust_list resumed>) = 0 [pid 10826] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10827] rt_sigprocmask(SIG_SETMASK, [], [pid 10826] <... futex resumed>) = 0 [pid 10827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10826] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10827] memfd_create("syzkaller", 0 [pid 10826] <... futex resumed>) = 0 [pid 10826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10827] <... memfd_create resumed>) = 3 [pid 10826] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10826] <... mprotect resumed>) = 0 [pid 10827] <... mmap resumed>) = 0x7f5527ca1000 [ 280.616982][T10824] loop0: detected capacity change from 0 to 512 [ 280.627497][T10824] ext4: Unknown parameter 'nouser_xattr' [pid 10826] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10826] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10828 attached => {parent_tid=[10828]}, 88) = 10828 [pid 10828] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10826] rt_sigprocmask(SIG_SETMASK, [], [pid 10828] <... rseq resumed>) = 0 [pid 10826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10828] set_robust_list(0x7f55300c19a0, 24 [pid 10827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10826] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10828] <... set_robust_list resumed>) = 0 [pid 10828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10826] <... futex resumed>) = 0 [pid 10828] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10826] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10828] <... open resumed>) = 4 [pid 10828] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10828] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10826] <... futex resumed>) = 0 [pid 10826] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10828] <... futex resumed>) = 0 [pid 10826] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10828] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10827] <... write resumed>) = 262144 [pid 10828] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10828] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10826] <... futex resumed>) = 0 [pid 10826] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10828] <... futex resumed>) = 0 [pid 10826] <... futex resumed>) = 1 [pid 10828] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10826] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10828] <... open resumed>) = 5 [pid 10828] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10826] <... futex resumed>) = 0 [pid 10826] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10826] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10828] <... futex resumed>) = 1 [pid 10828] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10827] munmap(0x7f5527ca1000, 262144 [pid 10828] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10828] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10827] <... munmap resumed>) = 0 [pid 10828] <... futex resumed>) = 1 [pid 10826] <... futex resumed>) = 0 [pid 10828] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10827] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10827] close(3) = 0 [pid 10827] mkdir("./file1", 0777) = 0 [pid 10827] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10827] ioctl(6, LOOP_CLR_FD) = 0 [pid 10827] close(6) = 0 [pid 10827] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10827] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10826] exit_group(0 [pid 10827] <... futex resumed>) = ? [pid 10827] +++ exited with 0 +++ [pid 10826] <... exit_group resumed>) = ? [pid 10828] <... futex resumed>) = ? [pid 10828] +++ exited with 0 +++ [pid 10826] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10826, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1274", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1274/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1274/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1274/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1274/bus") = 0 [pid 5052] umount2("./1274/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1274/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 280.694112][T10827] loop0: detected capacity change from 0 to 512 [ 280.704458][T10827] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1274/binderfs") = 0 [pid 5052] umount2("./1274/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1274/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1274/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1274/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1274/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1274") = 0 [pid 5052] mkdir("./1275", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10829 attached , child_tidptr=0x555556d60690) = 10829 [pid 10829] set_robust_list(0x555556d606a0, 24) = 0 [pid 10829] chdir("./1275") = 0 [pid 10829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10829] setpgid(0, 0) = 0 [pid 10829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10829] write(3, "1000", 4) = 4 [pid 10829] close(3) = 0 [pid 10829] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10829] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10829] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10829] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10829] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10829] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10829] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10830 attached [pid 10830] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10829] <... clone3 resumed> => {parent_tid=[10830]}, 88) = 10830 [pid 10830] <... rseq resumed>) = 0 [pid 10829] rt_sigprocmask(SIG_SETMASK, [], [pid 10830] set_robust_list(0x7f55300e29a0, 24 [pid 10829] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10830] <... set_robust_list resumed>) = 0 [pid 10830] rt_sigprocmask(SIG_SETMASK, [], [pid 10829] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10830] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10829] <... futex resumed>) = 0 [pid 10830] memfd_create("syzkaller", 0 [pid 10829] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10830] <... memfd_create resumed>) = 3 [pid 10829] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10829] <... mprotect resumed>) = 0 [pid 10830] <... mmap resumed>) = 0x7f5527ca1000 [pid 10830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10829] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10829] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10831]}, 88) = 10831 ./strace-static-x86_64: Process 10831 attached [pid 10831] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10829] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10829] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10831] <... rseq resumed>) = 0 [pid 10829] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10831] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10831] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10830] <... write resumed>) = 262144 [pid 10830] munmap(0x7f5527ca1000, 262144 [pid 10831] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10830] <... munmap resumed>) = 0 [pid 10830] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10830] ioctl(5, LOOP_SET_FD, 3 [pid 10831] <... futex resumed>) = 1 [pid 10829] <... futex resumed>) = 0 [pid 10831] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10829] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10831] <... futex resumed>) = 0 [pid 10831] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10829] <... futex resumed>) = 1 [pid 10829] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10831] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10830] <... ioctl resumed>) = 0 [pid 10830] close(3 [pid 10829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10831] <... futex resumed>) = 0 [pid 10830] <... close resumed>) = 0 [pid 10831] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10830] mkdir("./file1", 0777 [pid 10829] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10829] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10831] <... futex resumed>) = 0 [pid 10830] <... mkdir resumed>) = 0 [pid 10831] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10830] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10831] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10829] <... futex resumed>) = 0 [pid 10831] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10829] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10829] <... futex resumed>) = 0 [pid 10831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10829] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10830] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10830] ioctl(5, LOOP_CLR_FD) = 0 [pid 10830] close(5) = 0 [pid 10830] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10830] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10831] <... write resumed>) = 262144 [pid 10831] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10829] <... futex resumed>) = 0 [pid 10829] exit_group(0 [pid 10831] <... futex resumed>) = 1 [pid 10831] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10830] <... futex resumed>) = ? [pid 10829] <... exit_group resumed>) = ? [pid 10831] <... futex resumed>) = ? [pid 10830] +++ exited with 0 +++ [pid 10831] +++ exited with 0 +++ [pid 10829] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10829, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1275", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1275/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1275/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1275/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1275/bus") = 0 [pid 5052] umount2("./1275/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1275/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 280.800405][T10830] loop0: detected capacity change from 0 to 512 [ 280.813759][T10830] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1275/binderfs") = 0 [pid 5052] umount2("./1275/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1275/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1275/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1275/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1275/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1275") = 0 [pid 5052] mkdir("./1276", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10832 attached , child_tidptr=0x555556d60690) = 10832 [pid 10832] set_robust_list(0x555556d606a0, 24) = 0 [pid 10832] chdir("./1276") = 0 [pid 10832] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10832] setpgid(0, 0) = 0 [pid 10832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10832] write(3, "1000", 4) = 4 [pid 10832] close(3) = 0 [pid 10832] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10832] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10832] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10832] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10832] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10832] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10832] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10833 attached [pid 10833] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10832] <... clone3 resumed> => {parent_tid=[10833]}, 88) = 10833 [pid 10833] <... rseq resumed>) = 0 [pid 10833] set_robust_list(0x7f55300e29a0, 24 [pid 10832] rt_sigprocmask(SIG_SETMASK, [], [pid 10833] <... set_robust_list resumed>) = 0 [pid 10832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10833] rt_sigprocmask(SIG_SETMASK, [], [pid 10832] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10832] <... futex resumed>) = 0 [pid 10833] memfd_create("syzkaller", 0 [pid 10832] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10832] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10833] <... memfd_create resumed>) = 3 [pid 10832] <... mmap resumed>) = 0x7f55300a1000 [pid 10833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10832] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10832] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10832] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10834]}, 88) = 10834 [pid 10832] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10834 attached NULL, 8) = 0 [pid 10832] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10832] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10834] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10834] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10834] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10834] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10834] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10832] <... futex resumed>) = 0 [pid 10834] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10832] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10834] <... mount resumed>) = 0 [pid 10833] <... write resumed>) = 262144 [pid 10832] <... futex resumed>) = 0 [pid 10834] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10834] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10832] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10832] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10832] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10833] munmap(0x7f5527ca1000, 262144) = 0 [pid 10833] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10834] <... futex resumed>) = 0 [pid 10834] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10833] <... openat resumed>) = 6 [pid 10834] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10832] <... futex resumed>) = 0 [pid 10834] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10832] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10832] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10833] ioctl(6, LOOP_SET_FD, 3 [pid 10834] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10833] <... ioctl resumed>) = 0 [pid 10833] close(3) = 0 [pid 10833] mkdir("./file1", 0777) = 0 [pid 10833] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10834] <... write resumed>) = 262144 [pid 10833] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10834] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10832] <... futex resumed>) = 0 [pid 10834] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10833] ioctl(6, LOOP_CLR_FD) = 0 [pid 10833] close(6) = 0 [pid 10833] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10832] exit_group(0 [pid 10833] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10834] <... futex resumed>) = ? [pid 10833] <... futex resumed>) = ? [pid 10832] <... exit_group resumed>) = ? [pid 10834] +++ exited with 0 +++ [pid 10833] +++ exited with 0 +++ [pid 10832] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10832, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1276", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1276/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1276/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1276/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 280.895916][T10833] loop0: detected capacity change from 0 to 512 [ 280.911131][T10833] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1276/bus") = 0 [pid 5052] umount2("./1276/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1276/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1276/binderfs") = 0 [pid 5052] umount2("./1276/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1276/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1276/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1276/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1276/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1276") = 0 [pid 5052] mkdir("./1277", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10835 attached , child_tidptr=0x555556d60690) = 10835 [pid 10835] set_robust_list(0x555556d606a0, 24) = 0 [pid 10835] chdir("./1277") = 0 [pid 10835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10835] setpgid(0, 0) = 0 [pid 10835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10835] write(3, "1000", 4) = 4 [pid 10835] close(3) = 0 [pid 10835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10835] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10835] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10835] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10835] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10836 attached => {parent_tid=[10836]}, 88) = 10836 [pid 10836] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10835] rt_sigprocmask(SIG_SETMASK, [], [pid 10836] set_robust_list(0x7f55300e29a0, 24 [pid 10835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10835] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10835] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10835] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10836] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 10837 attached [pid 10836] rt_sigprocmask(SIG_SETMASK, [], [pid 10835] <... clone3 resumed> => {parent_tid=[10837]}, 88) = 10837 [pid 10837] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10837] <... rseq resumed>) = 0 [pid 10836] memfd_create("syzkaller", 0 [pid 10835] rt_sigprocmask(SIG_SETMASK, [], [pid 10837] set_robust_list(0x7f55300c19a0, 24 [pid 10836] <... memfd_create resumed>) = 3 [pid 10837] <... set_robust_list resumed>) = 0 [pid 10836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10837] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10836] <... mmap resumed>) = 0x7f5527ca1000 [pid 10835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10837] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10835] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10837] <... futex resumed>) = 0 [pid 10837] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10835] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10837] <... open resumed>) = 4 [pid 10837] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10837] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10835] <... futex resumed>) = 0 [pid 10837] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10835] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10837] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10835] <... futex resumed>) = 0 [pid 10837] <... mount resumed>) = 0 [pid 10836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10835] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10837] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10835] <... futex resumed>) = 0 [pid 10837] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10835] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10837] <... open resumed>) = 5 [pid 10835] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10837] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10835] <... futex resumed>) = 0 [pid 10836] <... write resumed>) = 262144 [pid 10835] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10837] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10836] munmap(0x7f5527ca1000, 262144 [pid 10835] <... futex resumed>) = 0 [pid 10837] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10835] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10837] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10836] <... munmap resumed>) = 0 [pid 10835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10837] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10836] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10836] close(3) = 0 [pid 10836] mkdir("./file1", 0777) = 0 [pid 10836] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10836] ioctl(6, LOOP_CLR_FD) = 0 [pid 10836] close(6) = 0 [pid 10836] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10835] exit_group(0 [pid 10837] <... futex resumed>) = ? [pid 10836] <... futex resumed>) = ? [pid 10836] +++ exited with 0 +++ [pid 10835] <... exit_group resumed>) = ? [pid 10837] +++ exited with 0 +++ [pid 10835] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10835, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1277", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1277/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1277/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1277/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1277/bus") = 0 [pid 5052] umount2("./1277/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1277/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1277/binderfs") = 0 [pid 5052] umount2("./1277/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1277/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1277/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1277/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1277/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1277") = 0 [pid 5052] mkdir("./1278", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 281.029213][T10836] loop0: detected capacity change from 0 to 512 [ 281.038385][T10836] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10838 attached , child_tidptr=0x555556d60690) = 10838 [pid 10838] set_robust_list(0x555556d606a0, 24) = 0 [pid 10838] chdir("./1278") = 0 [pid 10838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10838] setpgid(0, 0) = 0 [pid 10838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10838] write(3, "1000", 4) = 4 [pid 10838] close(3) = 0 [pid 10838] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10838] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10838] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10838] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10838] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10838] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10839 attached [pid 10839] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10838] <... clone3 resumed> => {parent_tid=[10839]}, 88) = 10839 [pid 10839] <... rseq resumed>) = 0 [pid 10838] rt_sigprocmask(SIG_SETMASK, [], [pid 10839] set_robust_list(0x7f55300e29a0, 24 [pid 10838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10839] <... set_robust_list resumed>) = 0 [pid 10838] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10839] rt_sigprocmask(SIG_SETMASK, [], [pid 10838] <... futex resumed>) = 0 [pid 10839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10838] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10839] memfd_create("syzkaller", 0 [pid 10838] <... futex resumed>) = 0 [pid 10838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10839] <... memfd_create resumed>) = 3 [pid 10838] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10838] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144./strace-static-x86_64: Process 10840 attached [pid 10840] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10838] <... clone3 resumed> => {parent_tid=[10840]}, 88) = 10840 [pid 10840] <... rseq resumed>) = 0 [pid 10840] set_robust_list(0x7f55300c19a0, 24 [pid 10838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10838] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10840] <... set_robust_list resumed>) = 0 [pid 10840] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10840] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10838] <... futex resumed>) = 0 [pid 10838] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10840] <... open resumed>) = 4 [pid 10840] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10838] <... futex resumed>) = 0 [pid 10838] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10838] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10840] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10839] <... write resumed>) = 262144 [pid 10840] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10838] <... futex resumed>) = 0 [pid 10839] munmap(0x7f5527ca1000, 262144 [pid 10838] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10838] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10840] <... futex resumed>) = 1 [pid 10840] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10839] <... munmap resumed>) = 0 [pid 10840] <... open resumed>) = 5 [pid 10840] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10838] <... futex resumed>) = 0 [pid 10840] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10838] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10838] <... futex resumed>) = 0 [pid 10840] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10838] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10840] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10839] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10840] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10838] <... futex resumed>) = 0 [pid 10840] <... futex resumed>) = 1 [pid 10839] <... openat resumed>) = 6 [pid 10840] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10839] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10839] close(3) = 0 [pid 10839] mkdir("./file1", 0777) = 0 [pid 10839] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10839] ioctl(6, LOOP_CLR_FD) = 0 [pid 10839] close(6) = 0 [pid 10839] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10839] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10838] exit_group(0 [pid 10840] <... futex resumed>) = ? [pid 10839] <... futex resumed>) = ? [pid 10838] <... exit_group resumed>) = ? [pid 10840] +++ exited with 0 +++ [pid 10839] +++ exited with 0 +++ [pid 10838] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10838, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1278", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1278/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1278/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1278/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1278/bus") = 0 [pid 5052] umount2("./1278/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1278/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1278/binderfs") = 0 [pid 5052] umount2("./1278/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1278/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1278/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1278/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1278/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1278") = 0 [pid 5052] mkdir("./1279", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 281.134557][T10839] loop0: detected capacity change from 0 to 512 [ 281.144727][T10839] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10841 attached , child_tidptr=0x555556d60690) = 10841 [pid 10841] set_robust_list(0x555556d606a0, 24) = 0 [pid 10841] chdir("./1279") = 0 [pid 10841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10841] setpgid(0, 0) = 0 [pid 10841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10841] write(3, "1000", 4) = 4 [pid 10841] close(3) = 0 [pid 10841] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10841] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10841] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10841] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10841] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10841] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10841] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10842 attached [pid 10842] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10842] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10842] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10842] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10841] <... clone3 resumed> => {parent_tid=[10842]}, 88) = 10842 [pid 10841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10841] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10841] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10842] <... futex resumed>) = 0 [pid 10841] <... mmap resumed>) = 0x7f55300a1000 [pid 10842] memfd_create("syzkaller", 0 [pid 10841] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10842] <... memfd_create resumed>) = 3 [pid 10841] <... mprotect resumed>) = 0 [pid 10842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10841] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10841] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10841] <... clone3 resumed> => {parent_tid=[10843]}, 88) = 10843 [pid 10841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10841] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10841] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10843 attached [pid 10842] <... write resumed>) = 262144 [pid 10842] munmap(0x7f5527ca1000, 262144 [pid 10843] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10843] set_robust_list(0x7f55300c19a0, 24 [pid 10842] <... munmap resumed>) = 0 [pid 10843] <... set_robust_list resumed>) = 0 [pid 10843] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10842] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10843] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10842] <... openat resumed>) = 4 [pid 10843] <... open resumed>) = 5 [pid 10842] ioctl(4, LOOP_SET_FD, 3 [pid 10843] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10843] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10841] <... futex resumed>) = 0 [pid 10841] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10843] <... futex resumed>) = 0 [pid 10843] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10841] <... futex resumed>) = 1 [pid 10841] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10843] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10841] <... futex resumed>) = 0 [pid 10841] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10843] <... futex resumed>) = 1 [pid 10841] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10843] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10843] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10842] <... ioctl resumed>) = 0 [pid 10843] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10842] close(3) = 0 [pid 10841] <... futex resumed>) = 0 [pid 10842] mkdir("./file1", 0777 [pid 10841] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10843] <... futex resumed>) = 0 [pid 10841] <... futex resumed>) = 1 [pid 10843] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10841] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10842] <... mkdir resumed>) = 0 [pid 10842] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10842] ioctl(4, LOOP_CLR_FD) = 0 [pid 10842] close(4) = 0 [pid 10843] <... write resumed>) = 262144 [pid 10842] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10843] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10842] <... futex resumed>) = 0 [pid 10843] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10842] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10841] <... futex resumed>) = 0 [pid 10841] exit_group(0 [pid 10843] <... futex resumed>) = ? [pid 10841] <... exit_group resumed>) = ? [pid 10843] +++ exited with 0 +++ [pid 10842] <... futex resumed>) = ? [pid 10842] +++ exited with 0 +++ [pid 10841] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10841, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1279", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1279/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1279/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1279/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 281.242765][T10842] loop0: detected capacity change from 0 to 512 [ 281.256200][T10842] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1279/bus") = 0 [pid 5052] umount2("./1279/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1279/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1279/binderfs") = 0 [pid 5052] umount2("./1279/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1279/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1279/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1279/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1279/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1279") = 0 [pid 5052] mkdir("./1280", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10844 attached , child_tidptr=0x555556d60690) = 10844 [pid 10844] set_robust_list(0x555556d606a0, 24) = 0 [pid 10844] chdir("./1280") = 0 [pid 10844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10844] setpgid(0, 0) = 0 [pid 10844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10844] write(3, "1000", 4) = 4 [pid 10844] close(3) = 0 [pid 10844] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10844] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10844] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10844] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10844] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10845 attached [pid 10845] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10844] <... clone3 resumed> => {parent_tid=[10845]}, 88) = 10845 [pid 10844] rt_sigprocmask(SIG_SETMASK, [], [pid 10845] <... rseq resumed>) = 0 [pid 10844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10845] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10844] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10845] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10844] <... futex resumed>) = 0 [pid 10844] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10845] memfd_create("syzkaller", 0 [pid 10844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10844] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10845] <... memfd_create resumed>) = 3 [pid 10844] <... mprotect resumed>) = 0 [pid 10845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10844] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10844] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10846 attached => {parent_tid=[10846]}, 88) = 10846 [pid 10844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10846] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10844] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10846] <... rseq resumed>) = 0 [pid 10844] <... futex resumed>) = 0 [pid 10844] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10846] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10846] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10846] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10845] <... write resumed>) = 262144 [pid 10846] <... open resumed>) = 4 [pid 10845] munmap(0x7f5527ca1000, 262144 [pid 10846] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10846] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10844] <... futex resumed>) = 0 [pid 10846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10844] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10846] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10844] <... futex resumed>) = 0 [pid 10845] <... munmap resumed>) = 0 [pid 10844] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10845] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10846] <... mount resumed>) = 0 [pid 10846] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10846] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10844] <... futex resumed>) = 0 [pid 10846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10844] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10846] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10845] <... openat resumed>) = 5 [pid 10844] <... futex resumed>) = 0 [pid 10846] <... open resumed>) = 6 [pid 10845] ioctl(5, LOOP_SET_FD, 3 [pid 10844] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10846] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10846] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10844] <... futex resumed>) = 0 [pid 10846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10844] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10846] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10844] <... futex resumed>) = 0 [pid 10846] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10844] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10846] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10846] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10845] <... ioctl resumed>) = 0 [pid 10845] close(3) = 0 [pid 10845] mkdir("./file1", 0777) = 0 [pid 10845] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10845] ioctl(5, LOOP_CLR_FD) = 0 [pid 10845] close(5) = 0 [pid 10845] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10845] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10844] exit_group(0 [pid 10846] <... futex resumed>) = ? [pid 10845] <... futex resumed>) = ? [pid 10844] <... exit_group resumed>) = ? [pid 10846] +++ exited with 0 +++ [pid 10845] +++ exited with 0 +++ [pid 10844] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10844, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1280", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1280/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1280/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1280/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1280/bus") = 0 [pid 5052] umount2("./1280/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1280/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1280/binderfs") = 0 [pid 5052] umount2("./1280/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1280/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1280/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1280/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1280/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1280") = 0 [pid 5052] mkdir("./1281", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10847 attached , child_tidptr=0x555556d60690) = 10847 [pid 10847] set_robust_list(0x555556d606a0, 24) = 0 [pid 10847] chdir("./1281") = 0 [ 281.358472][T10845] loop0: detected capacity change from 0 to 512 [ 281.368275][T10845] ext4: Unknown parameter 'nouser_xattr' [pid 10847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10847] setpgid(0, 0) = 0 [pid 10847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10847] write(3, "1000", 4) = 4 [pid 10847] close(3) = 0 [pid 10847] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10847] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10847] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10847] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10847] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10847] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10847] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10848 attached => {parent_tid=[10848]}, 88) = 10848 [pid 10847] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10847] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10847] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10848] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10848] <... rseq resumed>) = 0 [pid 10848] set_robust_list(0x7f55300e29a0, 24 [pid 10847] <... mmap resumed>) = 0x7f55300a1000 [pid 10848] <... set_robust_list resumed>) = 0 [pid 10848] rt_sigprocmask(SIG_SETMASK, [], [pid 10847] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10848] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10848] memfd_create("syzkaller", 0) = 3 [pid 10847] <... mprotect resumed>) = 0 [pid 10848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10847] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10847] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10849 attached [pid 10848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10849] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10847] <... clone3 resumed> => {parent_tid=[10849]}, 88) = 10849 [pid 10849] <... rseq resumed>) = 0 [pid 10849] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10849] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10847] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10847] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10849] <... futex resumed>) = 0 [pid 10847] <... futex resumed>) = 1 [pid 10849] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10847] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10849] <... open resumed>) = 4 [pid 10849] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10847] <... futex resumed>) = 0 [pid 10849] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10847] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10849] <... mount resumed>) = 0 [pid 10847] <... futex resumed>) = 0 [pid 10847] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10848] <... write resumed>) = 262144 [pid 10849] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10847] <... futex resumed>) = 0 [pid 10849] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10847] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10849] <... open resumed>) = 5 [pid 10848] munmap(0x7f5527ca1000, 262144 [pid 10847] <... futex resumed>) = 0 [pid 10847] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10849] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10848] <... munmap resumed>) = 0 [pid 10847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10849] <... futex resumed>) = 0 [pid 10847] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10849] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10847] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10849] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10849] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10847] <... futex resumed>) = 0 [pid 10849] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10848] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10848] close(3) = 0 [pid 10848] mkdir("./file1", 0777) = 0 [pid 10848] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10848] ioctl(6, LOOP_CLR_FD) = 0 [pid 10848] close(6) = 0 [pid 10848] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10847] exit_group(0) = ? [pid 10849] <... futex resumed>) = ? [pid 10849] +++ exited with 0 +++ [pid 10848] +++ exited with 0 +++ [pid 10847] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10847, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1281", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1281/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1281/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1281/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1281/bus") = 0 [pid 5052] umount2("./1281/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1281/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1281/binderfs") = 0 [pid 5052] umount2("./1281/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1281/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1281/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1281/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1281/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [ 281.456934][T10848] loop0: detected capacity change from 0 to 512 [ 281.471810][T10848] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(3) = 0 [pid 5052] rmdir("./1281") = 0 [pid 5052] mkdir("./1282", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10850 attached , child_tidptr=0x555556d60690) = 10850 [pid 10850] set_robust_list(0x555556d606a0, 24) = 0 [pid 10850] chdir("./1282") = 0 [pid 10850] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10850] setpgid(0, 0) = 0 [pid 10850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10850] write(3, "1000", 4) = 4 [pid 10850] close(3) = 0 [pid 10850] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10850] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10850] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10850] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10850] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10850] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10850] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10850] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10851]}, 88) = 10851 [pid 10850] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10850] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10850] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10850] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10850] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10850] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 10851 attached [], 8) = 0 [pid 10850] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10851] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 ./strace-static-x86_64: Process 10852 attached [pid 10851] set_robust_list(0x7f55300e29a0, 24 [pid 10852] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10851] <... set_robust_list resumed>) = 0 [pid 10852] <... rseq resumed>) = 0 [pid 10851] rt_sigprocmask(SIG_SETMASK, [], [pid 10850] <... clone3 resumed> => {parent_tid=[10852]}, 88) = 10852 [pid 10852] set_robust_list(0x7f55300c19a0, 24 [pid 10851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10850] rt_sigprocmask(SIG_SETMASK, [], [pid 10852] <... set_robust_list resumed>) = 0 [pid 10851] memfd_create("syzkaller", 0 [pid 10852] rt_sigprocmask(SIG_SETMASK, [], [pid 10850] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10852] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10851] <... memfd_create resumed>) = 3 [pid 10850] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10852] <... futex resumed>) = 0 [pid 10851] <... mmap resumed>) = 0x7f5527ca1000 [pid 10850] <... futex resumed>) = 1 [pid 10852] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10852] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10852] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10850] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10850] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10852] <... futex resumed>) = 0 [pid 10850] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10852] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10852] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10850] <... futex resumed>) = 0 [pid 10850] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10852] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10850] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10852] <... open resumed>) = 5 [pid 10851] <... write resumed>) = 262144 [pid 10852] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10850] <... futex resumed>) = 0 [pid 10850] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10850] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10852] <... futex resumed>) = 1 [pid 10852] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10852] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10850] <... futex resumed>) = 0 [pid 10852] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10851] munmap(0x7f5527ca1000, 262144) = 0 [pid 10851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10851] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10851] close(3) = 0 [pid 10851] mkdir("./file1", 0777) = 0 [pid 10851] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10851] ioctl(6, LOOP_CLR_FD) = 0 [pid 10851] close(6) = 0 [pid 10851] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10851] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10850] exit_group(0 [pid 10851] <... futex resumed>) = ? [pid 10850] <... exit_group resumed>) = ? [pid 10852] <... futex resumed>) = ? [pid 10852] +++ exited with 0 +++ [pid 10851] +++ exited with 0 +++ [pid 10850] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10850, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1282", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1282/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1282/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1282/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1282/bus") = 0 [pid 5052] umount2("./1282/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1282/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1282/binderfs") = 0 [pid 5052] umount2("./1282/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1282/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1282/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1282/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1282/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1282") = 0 [pid 5052] mkdir("./1283", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10853 attached , child_tidptr=0x555556d60690) = 10853 [pid 10853] set_robust_list(0x555556d606a0, 24) = 0 [pid 10853] chdir("./1283") = 0 [pid 10853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10853] setpgid(0, 0) = 0 [pid 10853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10853] write(3, "1000", 4) = 4 [pid 10853] close(3) = 0 [pid 10853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10853] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10853] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10853] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10853] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10853] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10853] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10854 attached [pid 10854] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10853] <... clone3 resumed> => {parent_tid=[10854]}, 88) = 10854 [pid 10854] set_robust_list(0x7f55300e29a0, 24 [pid 10853] rt_sigprocmask(SIG_SETMASK, [], [pid 10854] <... set_robust_list resumed>) = 0 [pid 10853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10854] rt_sigprocmask(SIG_SETMASK, [], [pid 10853] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10853] <... futex resumed>) = 0 [pid 10854] memfd_create("syzkaller", 0 [pid 10853] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10854] <... memfd_create resumed>) = 3 [pid 10853] <... mmap resumed>) = 0x7f55300a1000 [pid 10854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10853] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10853] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10853] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10855 attached => {parent_tid=[10855]}, 88) = 10855 [pid 10853] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10853] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10853] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 281.580129][T10851] loop0: detected capacity change from 0 to 512 [ 281.589456][T10851] ext4: Unknown parameter 'nouser_xattr' [pid 10855] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10855] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10855] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10855] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10853] <... futex resumed>) = 0 [pid 10855] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10854] <... write resumed>) = 262144 [pid 10853] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10853] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10854] munmap(0x7f5527ca1000, 262144 [pid 10855] <... mount resumed>) = 0 [pid 10855] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10853] <... futex resumed>) = 0 [pid 10855] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10853] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10855] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10853] <... futex resumed>) = 0 [pid 10855] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10853] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10854] <... munmap resumed>) = 0 [pid 10854] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10854] ioctl(5, LOOP_SET_FD, 3 [pid 10855] <... open resumed>) = 6 [pid 10854] <... ioctl resumed>) = 0 [pid 10855] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10854] close(3 [pid 10855] <... futex resumed>) = 1 [pid 10854] <... close resumed>) = 0 [pid 10855] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10854] mkdir("./file1", 0777 [pid 10853] <... futex resumed>) = 0 [pid 10853] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10855] <... futex resumed>) = 0 [pid 10853] <... futex resumed>) = 1 [pid 10855] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10853] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10854] <... mkdir resumed>) = 0 [pid 10854] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10854] ioctl(5, LOOP_CLR_FD [pid 10855] <... write resumed>) = 262144 [pid 10854] <... ioctl resumed>) = 0 [pid 10855] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10853] <... futex resumed>) = 0 [pid 10855] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10854] close(5) = 0 [pid 10854] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10854] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10853] exit_group(0 [pid 10854] <... futex resumed>) = ? [pid 10853] <... exit_group resumed>) = ? [pid 10854] +++ exited with 0 +++ [pid 10855] <... futex resumed>) = ? [pid 10855] +++ exited with 0 +++ [pid 10853] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10853, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1283", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 281.650728][T10854] loop0: detected capacity change from 0 to 512 [ 281.667380][T10854] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1283/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1283/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1283/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1283/bus") = 0 [pid 5052] umount2("./1283/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1283/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1283/binderfs") = 0 [pid 5052] umount2("./1283/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1283/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1283/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1283/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1283/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1283") = 0 [pid 5052] mkdir("./1284", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10856 attached , child_tidptr=0x555556d60690) = 10856 [pid 10856] set_robust_list(0x555556d606a0, 24) = 0 [pid 10856] chdir("./1284") = 0 [pid 10856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10856] setpgid(0, 0) = 0 [pid 10856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10856] write(3, "1000", 4) = 4 [pid 10856] close(3) = 0 [pid 10856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10856] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10856] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10856] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10856] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10856] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10857 attached [pid 10857] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10856] <... clone3 resumed> => {parent_tid=[10857]}, 88) = 10857 [pid 10857] set_robust_list(0x7f55300e29a0, 24 [pid 10856] rt_sigprocmask(SIG_SETMASK, [], [pid 10857] <... set_robust_list resumed>) = 0 [pid 10857] rt_sigprocmask(SIG_SETMASK, [], [pid 10856] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10856] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10857] memfd_create("syzkaller", 0 [pid 10856] <... futex resumed>) = 0 [pid 10856] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10857] <... memfd_create resumed>) = 3 [pid 10856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10856] <... mmap resumed>) = 0x7f55300a1000 [pid 10857] <... mmap resumed>) = 0x7f5527ca1000 [pid 10856] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10856] <... mprotect resumed>) = 0 [pid 10856] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10856] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10858]}, 88) = 10858 [pid 10856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10856] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10856] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10857] <... write resumed>) = 262144 [pid 10857] munmap(0x7f5527ca1000, 262144) = 0 [pid 10857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 10857] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 10858 attached [pid 10858] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10858] set_robust_list(0x7f55300c19a0, 24 [pid 10857] <... ioctl resumed>) = 0 [pid 10857] close(3) = 0 [pid 10857] mkdir("./file1", 0777) = 0 [pid 10857] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10858] <... set_robust_list resumed>) = 0 [pid 10858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10858] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 3 [pid 10857] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10857] ioctl(4, LOOP_CLR_FD) = 0 [pid 10857] close(4) = 0 [pid 10857] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10857] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10858] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10856] <... futex resumed>) = 0 [pid 10856] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10856] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10857] <... futex resumed>) = 0 [pid 10857] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10858] <... futex resumed>) = 1 [pid 10858] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10857] <... mount resumed>) = 0 [pid 10857] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10856] <... futex resumed>) = 0 [pid 10857] <... futex resumed>) = 1 [pid 10856] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10857] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10856] <... futex resumed>) = 0 [pid 10856] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10857] <... open resumed>) = 4 [pid 10857] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10857] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10856] <... futex resumed>) = 0 [pid 10856] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10857] <... futex resumed>) = 0 [pid 10857] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10856] <... futex resumed>) = 1 [pid 10857] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10856] futex(0x7f55301ad6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10857] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10856] <... futex resumed>) = 0 [pid 10857] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10856] exit_group(0) = ? [pid 10858] <... futex resumed>) = ? [pid 10857] <... futex resumed>) = ? [pid 10858] +++ exited with 0 +++ [pid 10857] +++ exited with 0 +++ [pid 10856] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10856, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] umount2("./1284", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1284/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1284/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1284/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1284/bus") = 0 [pid 5052] umount2("./1284/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1284/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1284/binderfs") = 0 [pid 5052] umount2("./1284/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1284/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1284/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1284/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1284/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1284") = 0 [pid 5052] mkdir("./1285", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 281.762407][T10857] loop0: detected capacity change from 0 to 512 [ 281.772323][T10857] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10859 ./strace-static-x86_64: Process 10859 attached [pid 10859] set_robust_list(0x555556d606a0, 24) = 0 [pid 10859] chdir("./1285") = 0 [pid 10859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10859] setpgid(0, 0) = 0 [pid 10859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10859] write(3, "1000", 4) = 4 [pid 10859] close(3) = 0 [pid 10859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10859] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10859] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10859] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10859] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10859] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10859] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10860]}, 88) = 10860 ./strace-static-x86_64: Process 10860 attached [pid 10860] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10859] rt_sigprocmask(SIG_SETMASK, [], [pid 10860] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10859] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10860] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10859] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10860] memfd_create("syzkaller", 0 [pid 10859] <... futex resumed>) = 0 [pid 10859] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10860] <... memfd_create resumed>) = 3 [pid 10859] <... mmap resumed>) = 0x7f55300a1000 [pid 10860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10859] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10859] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10859] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10859] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10861]}, 88) = 10861 ./strace-static-x86_64: Process 10861 attached [pid 10861] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10859] rt_sigprocmask(SIG_SETMASK, [], [pid 10861] <... rseq resumed>) = 0 [pid 10859] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10859] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10861] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10859] <... futex resumed>) = 0 [pid 10861] rt_sigprocmask(SIG_SETMASK, [], [pid 10859] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10861] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10861] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10861] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10860] <... write resumed>) = 262144 [pid 10859] <... futex resumed>) = 0 [pid 10859] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10861] <... futex resumed>) = 1 [pid 10859] <... futex resumed>) = 0 [pid 10861] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10859] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10860] munmap(0x7f5527ca1000, 262144 [pid 10861] <... mount resumed>) = 0 [pid 10861] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10859] <... futex resumed>) = 0 [pid 10861] <... futex resumed>) = 1 [pid 10861] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10860] <... munmap resumed>) = 0 [pid 10859] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10861] <... open resumed>) = 5 [pid 10859] <... futex resumed>) = 0 [pid 10861] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10860] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10859] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10859] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10859] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10861] <... futex resumed>) = 1 [pid 10859] <... futex resumed>) = 0 [pid 10861] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10859] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10861] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10861] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10859] <... futex resumed>) = 0 [pid 10861] <... futex resumed>) = 1 [pid 10861] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10860] <... openat resumed>) = 6 [pid 10860] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10860] close(3) = 0 [pid 10860] mkdir("./file1", 0777) = 0 [pid 10860] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10860] ioctl(6, LOOP_CLR_FD) = 0 [pid 10860] close(6) = 0 [pid 10860] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10860] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10859] exit_group(0 [pid 10860] <... futex resumed>) = ? [pid 10859] <... exit_group resumed>) = ? [pid 10861] <... futex resumed>) = ? [pid 10860] +++ exited with 0 +++ [pid 10861] +++ exited with 0 +++ [pid 10859] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10859, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1285", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1285/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1285/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1285/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1285/bus") = 0 [pid 5052] umount2("./1285/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1285/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1285/binderfs") = 0 [pid 5052] umount2("./1285/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1285/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1285/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1285/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1285/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1285") = 0 [pid 5052] mkdir("./1286", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10862 attached , child_tidptr=0x555556d60690) = 10862 [pid 10862] set_robust_list(0x555556d606a0, 24) = 0 [pid 10862] chdir("./1286") = 0 [pid 10862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10862] setpgid(0, 0) = 0 [ 281.863037][T10860] loop0: detected capacity change from 0 to 512 [ 281.871795][T10860] ext4: Unknown parameter 'nouser_xattr' [pid 10862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10862] write(3, "1000", 4) = 4 [pid 10862] close(3) = 0 [pid 10862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10862] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10862] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10862] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10862] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10862] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10863]}, 88) = 10863 [pid 10862] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10862] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10862] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10863 attached [pid 10863] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10862] <... futex resumed>) = 0 [pid 10863] <... rseq resumed>) = 0 [pid 10862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10863] set_robust_list(0x7f55300e29a0, 24 [pid 10862] <... mmap resumed>) = 0x7f55300a1000 [pid 10863] <... set_robust_list resumed>) = 0 [pid 10862] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10863] rt_sigprocmask(SIG_SETMASK, [], [pid 10862] <... mprotect resumed>) = 0 [pid 10863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10863] memfd_create("syzkaller", 0 [pid 10862] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10863] <... memfd_create resumed>) = 3 [pid 10862] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10864 attached [pid 10864] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10862] <... clone3 resumed> => {parent_tid=[10864]}, 88) = 10864 [pid 10864] set_robust_list(0x7f55300c19a0, 24 [pid 10862] rt_sigprocmask(SIG_SETMASK, [], [pid 10864] <... set_robust_list resumed>) = 0 [pid 10862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10864] rt_sigprocmask(SIG_SETMASK, [], [pid 10862] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10864] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10862] <... futex resumed>) = 0 [pid 10863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10862] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10864] <... open resumed>) = 4 [pid 10864] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10863] <... mmap resumed>) = 0x7f5527ca1000 [pid 10864] <... futex resumed>) = 1 [pid 10862] <... futex resumed>) = 0 [pid 10864] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10862] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10862] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10864] <... futex resumed>) = 0 [pid 10864] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10864] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10862] <... futex resumed>) = 0 [pid 10862] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10864] <... futex resumed>) = 1 [pid 10862] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10864] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10863] <... write resumed>) = 262144 [pid 10864] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10862] <... futex resumed>) = 0 [pid 10862] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10862] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10864] <... futex resumed>) = 1 [pid 10864] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10864] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10862] <... futex resumed>) = 0 [pid 10864] <... futex resumed>) = 1 [pid 10864] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10863] munmap(0x7f5527ca1000, 262144) = 0 [pid 10863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10863] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10863] close(3) = 0 [pid 10863] mkdir("./file1", 0777) = 0 [pid 10863] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10863] ioctl(6, LOOP_CLR_FD) = 0 [pid 10863] close(6) = 0 [pid 10863] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10863] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10862] exit_group(0 [pid 10864] <... futex resumed>) = ? [pid 10863] <... futex resumed>) = ? [pid 10864] +++ exited with 0 +++ [pid 10863] +++ exited with 0 +++ [pid 10862] <... exit_group resumed>) = ? [pid 10862] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10862, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1286", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1286/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1286/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1286/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1286/bus") = 0 [pid 5052] umount2("./1286/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1286/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1286/binderfs") = 0 [pid 5052] umount2("./1286/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1286/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1286/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1286/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1286/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1286") = 0 [pid 5052] mkdir("./1287", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 281.956009][T10863] loop0: detected capacity change from 0 to 512 [ 281.965391][T10863] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10865 attached , child_tidptr=0x555556d60690) = 10865 [pid 10865] set_robust_list(0x555556d606a0, 24) = 0 [pid 10865] chdir("./1287") = 0 [pid 10865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10865] setpgid(0, 0) = 0 [pid 10865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10865] write(3, "1000", 4) = 4 [pid 10865] close(3) = 0 [pid 10865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10865] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10865] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10865] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10865] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10865] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10866 attached [pid 10866] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10865] <... clone3 resumed> => {parent_tid=[10866]}, 88) = 10866 [pid 10866] <... rseq resumed>) = 0 [pid 10865] rt_sigprocmask(SIG_SETMASK, [], [pid 10866] set_robust_list(0x7f55300e29a0, 24 [pid 10865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10866] <... set_robust_list resumed>) = 0 [pid 10866] rt_sigprocmask(SIG_SETMASK, [], [pid 10865] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10866] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10865] <... futex resumed>) = 0 [pid 10866] memfd_create("syzkaller", 0 [pid 10865] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10866] <... memfd_create resumed>) = 3 [pid 10865] <... mmap resumed>) = 0x7f55300a1000 [pid 10866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10865] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10865] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10865] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10865] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10867]}, 88) = 10867 ./strace-static-x86_64: Process 10867 attached [pid 10867] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10865] rt_sigprocmask(SIG_SETMASK, [], [pid 10867] <... rseq resumed>) = 0 [pid 10867] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10867] rt_sigprocmask(SIG_SETMASK, [], [pid 10865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10865] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10867] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10866] <... write resumed>) = 262144 [pid 10865] <... futex resumed>) = 0 [pid 10867] <... open resumed>) = 4 [pid 10866] munmap(0x7f5527ca1000, 262144 [pid 10865] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10867] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10865] <... futex resumed>) = 0 [pid 10867] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10866] <... munmap resumed>) = 0 [pid 10865] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10865] <... futex resumed>) = 0 [pid 10867] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10865] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10866] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10867] <... mount resumed>) = 0 [pid 10866] <... openat resumed>) = 5 [pid 10867] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10866] ioctl(5, LOOP_SET_FD, 3 [pid 10867] <... futex resumed>) = 1 [pid 10865] <... futex resumed>) = 0 [pid 10867] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10865] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10865] <... futex resumed>) = 0 [pid 10867] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10865] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10867] <... open resumed>) = 6 [pid 10867] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10865] <... futex resumed>) = 0 [pid 10867] <... futex resumed>) = 1 [pid 10865] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10867] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10865] <... futex resumed>) = 0 [pid 10866] <... ioctl resumed>) = 0 [pid 10865] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10866] close(3) = 0 [pid 10866] mkdir("./file1", 0777) = 0 [pid 10866] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10867] <... write resumed>) = 262144 [pid 10867] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10867] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10865] <... futex resumed>) = 0 [pid 10866] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10866] ioctl(5, LOOP_CLR_FD) = 0 [pid 10866] close(5) = 0 [pid 10866] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10866] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10865] exit_group(0 [pid 10867] <... futex resumed>) = ? [pid 10865] <... exit_group resumed>) = ? [pid 10866] <... futex resumed>) = ? [pid 10866] +++ exited with 0 +++ [pid 10867] +++ exited with 0 +++ [pid 10865] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10865, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1287", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1287/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1287/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1287/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1287/bus") = 0 [pid 5052] umount2("./1287/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1287/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1287/binderfs") = 0 [pid 5052] umount2("./1287/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1287/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1287/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1287/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1287/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 282.055397][T10866] loop0: detected capacity change from 0 to 512 [ 282.070699][T10866] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1287") = 0 [pid 5052] mkdir("./1288", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10868 attached , child_tidptr=0x555556d60690) = 10868 [pid 10868] set_robust_list(0x555556d606a0, 24) = 0 [pid 10868] chdir("./1288") = 0 [pid 10868] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10868] setpgid(0, 0) = 0 [pid 10868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10868] write(3, "1000", 4) = 4 [pid 10868] close(3) = 0 [pid 10868] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10868] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10868] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10868] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10868] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10868] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10868] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10869 attached => {parent_tid=[10869]}, 88) = 10869 [pid 10868] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10868] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10868] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10868] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10869] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10869] set_robust_list(0x7f55300e29a0, 24 [pid 10868] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10869] <... set_robust_list resumed>) = 0 [pid 10869] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10868] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10868] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10869] memfd_create("syzkaller", 0./strace-static-x86_64: Process 10870 attached [pid 10870] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10869] <... memfd_create resumed>) = 3 [pid 10868] <... clone3 resumed> => {parent_tid=[10870]}, 88) = 10870 [pid 10870] <... rseq resumed>) = 0 [pid 10869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10868] rt_sigprocmask(SIG_SETMASK, [], [pid 10870] set_robust_list(0x7f55300c19a0, 24 [pid 10868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10870] <... set_robust_list resumed>) = 0 [pid 10870] rt_sigprocmask(SIG_SETMASK, [], [pid 10868] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10870] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10868] <... futex resumed>) = 0 [pid 10869] <... mmap resumed>) = 0x7f5527ca1000 [pid 10870] <... open resumed>) = 4 [pid 10870] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10868] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10870] <... futex resumed>) = 0 [pid 10868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10870] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10868] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10870] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10868] <... futex resumed>) = 0 [pid 10870] <... mount resumed>) = 0 [pid 10869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10868] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10870] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10870] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10868] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10870] <... futex resumed>) = 0 [pid 10868] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10870] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10870] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10869] <... write resumed>) = 262144 [pid 10869] munmap(0x7f5527ca1000, 262144 [pid 10868] <... futex resumed>) = 0 [pid 10870] <... futex resumed>) = 1 [pid 10868] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10870] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10868] <... futex resumed>) = 0 [pid 10870] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10868] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10870] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10869] <... munmap resumed>) = 0 [pid 10869] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10870] <... futex resumed>) = 0 [pid 10869] <... openat resumed>) = 6 [pid 10869] ioctl(6, LOOP_SET_FD, 3 [pid 10870] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10869] <... ioctl resumed>) = 0 [pid 10869] close(3) = 0 [pid 10869] mkdir("./file1", 0777) = 0 [pid 10869] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10869] ioctl(6, LOOP_CLR_FD) = 0 [pid 10869] close(6) = 0 [pid 10869] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10868] exit_group(0 [pid 10869] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10870] <... futex resumed>) = ? [pid 10869] <... futex resumed>) = ? [pid 10868] <... exit_group resumed>) = ? [pid 10870] +++ exited with 0 +++ [pid 10869] +++ exited with 0 +++ [pid 10868] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10868, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1288", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1288/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1288/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1288/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1288/bus") = 0 [pid 5052] umount2("./1288/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1288/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1288/binderfs") = 0 [pid 5052] umount2("./1288/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1288/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1288/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1288/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 282.163705][T10869] loop0: detected capacity change from 0 to 512 [ 282.172798][T10869] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1288/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1288") = 0 [pid 5052] mkdir("./1289", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10871 ./strace-static-x86_64: Process 10871 attached [pid 10871] set_robust_list(0x555556d606a0, 24) = 0 [pid 10871] chdir("./1289") = 0 [pid 10871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10871] setpgid(0, 0) = 0 [pid 10871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10871] write(3, "1000", 4) = 4 [pid 10871] close(3) = 0 [pid 10871] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10871] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10871] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10871] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10871] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10871] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10872 attached => {parent_tid=[10872]}, 88) = 10872 [pid 10872] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10871] rt_sigprocmask(SIG_SETMASK, [], [pid 10872] <... rseq resumed>) = 0 [pid 10871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10872] set_robust_list(0x7f55300e29a0, 24 [pid 10871] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10872] <... set_robust_list resumed>) = 0 [pid 10871] <... futex resumed>) = 0 [pid 10872] rt_sigprocmask(SIG_SETMASK, [], [pid 10871] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10871] <... futex resumed>) = 0 [pid 10871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10872] memfd_create("syzkaller", 0 [pid 10871] <... mmap resumed>) = 0x7f55300a1000 [pid 10871] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10872] <... memfd_create resumed>) = 3 [pid 10872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10871] <... mprotect resumed>) = 0 [pid 10872] <... mmap resumed>) = 0x7f5527ca1000 [pid 10871] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10871] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10873 attached [pid 10873] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10871] <... clone3 resumed> => {parent_tid=[10873]}, 88) = 10873 [pid 10873] <... rseq resumed>) = 0 [pid 10871] rt_sigprocmask(SIG_SETMASK, [], [pid 10873] set_robust_list(0x7f55300c19a0, 24 [pid 10871] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10873] <... set_robust_list resumed>) = 0 [pid 10871] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10873] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10871] <... futex resumed>) = 0 [pid 10873] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10871] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10873] <... open resumed>) = 4 [pid 10873] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10871] <... futex resumed>) = 0 [pid 10873] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10871] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10871] <... futex resumed>) = 0 [pid 10872] <... write resumed>) = 262144 [pid 10871] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10873] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10872] munmap(0x7f5527ca1000, 262144 [pid 10873] <... mount resumed>) = 0 [pid 10873] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10873] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10871] <... futex resumed>) = 0 [pid 10871] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10873] <... futex resumed>) = 0 [pid 10872] <... munmap resumed>) = 0 [pid 10871] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10873] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10872] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10873] <... open resumed>) = 5 [pid 10872] <... openat resumed>) = 6 [pid 10873] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10872] ioctl(6, LOOP_SET_FD, 3 [pid 10871] <... futex resumed>) = 0 [pid 10873] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10871] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10873] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10872] <... ioctl resumed>) = 0 [pid 10871] <... futex resumed>) = 0 [pid 10871] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10872] close(3) = 0 [pid 10872] mkdir("./file1", 0777) = 0 [pid 10872] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10873] <... write resumed>) = 262144 [pid 10873] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10873] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10871] <... futex resumed>) = 0 [pid 10872] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10872] ioctl(6, LOOP_CLR_FD) = 0 [pid 10872] close(6) = 0 [pid 10872] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10872] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10871] exit_group(0 [pid 10873] <... futex resumed>) = ? [pid 10873] +++ exited with 0 +++ [pid 10872] <... futex resumed>) = ? [pid 10872] +++ exited with 0 +++ [pid 10871] <... exit_group resumed>) = ? [pid 10871] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10871, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1289", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1289/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1289/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1289/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1289/bus") = 0 [ 282.275973][T10872] loop0: detected capacity change from 0 to 512 [ 282.289445][T10872] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1289/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1289/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1289/binderfs") = 0 [pid 5052] umount2("./1289/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1289/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1289/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1289/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1289/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1289") = 0 [pid 5052] mkdir("./1290", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10874 attached , child_tidptr=0x555556d60690) = 10874 [pid 10874] set_robust_list(0x555556d606a0, 24) = 0 [pid 10874] chdir("./1290") = 0 [pid 10874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10874] setpgid(0, 0) = 0 [pid 10874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10874] write(3, "1000", 4) = 4 [pid 10874] close(3) = 0 [pid 10874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10874] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10874] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10874] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10874] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10874] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10875 attached => {parent_tid=[10875]}, 88) = 10875 [pid 10875] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10874] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10874] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10875] <... rseq resumed>) = 0 [pid 10874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10875] set_robust_list(0x7f55300e29a0, 24 [pid 10874] <... mmap resumed>) = 0x7f55300a1000 [pid 10874] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10875] <... set_robust_list resumed>) = 0 [pid 10875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10874] <... mprotect resumed>) = 0 [pid 10874] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10875] memfd_create("syzkaller", 0 [pid 10874] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10876 attached [pid 10875] <... memfd_create resumed>) = 3 [pid 10874] <... clone3 resumed> => {parent_tid=[10876]}, 88) = 10876 [pid 10874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10874] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10874] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10876] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10876] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10876] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10876] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10876] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10874] <... futex resumed>) = 0 [pid 10876] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10874] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10874] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10875] <... write resumed>) = 262144 [pid 10875] munmap(0x7f5527ca1000, 262144) = 0 [pid 10875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10875] ioctl(5, LOOP_SET_FD, 3 [pid 10876] <... futex resumed>) = 0 [pid 10875] <... ioctl resumed>) = 0 [pid 10875] close(3) = 0 [pid 10875] mkdir("./file1", 0777 [pid 10876] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10875] <... mkdir resumed>) = 0 [pid 10876] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10876] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10874] <... futex resumed>) = 0 [pid 10875] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10874] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10876] <... futex resumed>) = 0 [pid 10874] <... futex resumed>) = 1 [pid 10876] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10874] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10876] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10875] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10876] <... futex resumed>) = 0 [pid 10876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10875] ioctl(5, LOOP_CLR_FD [pid 10874] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10875] <... ioctl resumed>) = 0 [pid 10874] <... futex resumed>) = 0 [pid 10874] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10875] close(5) = 0 [pid 10875] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10875] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10876] <... write resumed>) = 262144 [pid 10876] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10874] <... futex resumed>) = 0 [pid 10876] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10874] exit_group(0 [pid 10876] <... futex resumed>) = ? [pid 10874] <... exit_group resumed>) = ? [pid 10876] +++ exited with 0 +++ [pid 10875] <... futex resumed>) = ? [pid 10875] +++ exited with 0 +++ [pid 10874] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10874, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1290", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1290/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1290/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1290/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1290/bus") = 0 [pid 5052] umount2("./1290/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1290/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1290/binderfs") = 0 [pid 5052] umount2("./1290/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1290/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1290/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1290/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 282.398893][T10875] loop0: detected capacity change from 0 to 512 [ 282.409895][T10875] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1290/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1290") = 0 [pid 5052] mkdir("./1291", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10877 attached , child_tidptr=0x555556d60690) = 10877 [pid 10877] set_robust_list(0x555556d606a0, 24) = 0 [pid 10877] chdir("./1291") = 0 [pid 10877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10877] setpgid(0, 0) = 0 [pid 10877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10877] write(3, "1000", 4) = 4 [pid 10877] close(3) = 0 [pid 10877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10877] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10877] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10877] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10877] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10877] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10877] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10878]}, 88) = 10878 [pid 10877] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10877] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10877] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10877] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10877] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10877] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10878 attached [pid 10878] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10878] set_robust_list(0x7f55300e29a0, 24./strace-static-x86_64: Process 10879 attached ) = 0 [pid 10877] <... clone3 resumed> => {parent_tid=[10879]}, 88) = 10879 [pid 10879] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10878] rt_sigprocmask(SIG_SETMASK, [], [pid 10879] <... rseq resumed>) = 0 [pid 10878] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10877] rt_sigprocmask(SIG_SETMASK, [], [pid 10879] set_robust_list(0x7f55300c19a0, 24 [pid 10878] memfd_create("syzkaller", 0 [pid 10877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10879] <... set_robust_list resumed>) = 0 [pid 10878] <... memfd_create resumed>) = 3 [pid 10877] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10879] rt_sigprocmask(SIG_SETMASK, [], [pid 10878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10877] <... futex resumed>) = 0 [pid 10879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10878] <... mmap resumed>) = 0x7f5527ca1000 [pid 10879] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10877] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10879] <... open resumed>) = 4 [pid 10879] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10877] <... futex resumed>) = 0 [pid 10879] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10877] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10879] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10877] <... futex resumed>) = 0 [pid 10879] <... mount resumed>) = 0 [pid 10878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10877] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10879] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10877] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10879] <... futex resumed>) = 0 [pid 10877] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10879] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10877] <... futex resumed>) = 0 [pid 10879] <... open resumed>) = 5 [pid 10877] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10879] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10877] <... futex resumed>) = 0 [pid 10879] <... futex resumed>) = 1 [pid 10879] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10877] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10879] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10877] <... futex resumed>) = 0 [pid 10879] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10877] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10879] <... futex resumed>) = 0 [pid 10877] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10879] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10878] <... write resumed>) = 262144 [pid 10878] munmap(0x7f5527ca1000, 262144) = 0 [pid 10878] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10878] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10878] close(3) = 0 [pid 10878] mkdir("./file1", 0777) = 0 [pid 10878] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10878] ioctl(6, LOOP_CLR_FD) = 0 [pid 10878] close(6) = 0 [pid 10878] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10878] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10877] exit_group(0 [pid 10879] <... futex resumed>) = ? [pid 10878] <... futex resumed>) = ? [pid 10877] <... exit_group resumed>) = ? [pid 10878] +++ exited with 0 +++ [pid 10879] +++ exited with 0 +++ [pid 10877] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10877, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1291", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1291/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1291/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1291/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1291/bus") = 0 [pid 5052] umount2("./1291/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1291/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1291/binderfs") = 0 [pid 5052] umount2("./1291/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1291/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1291/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1291/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1291/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1291") = 0 [pid 5052] mkdir("./1292", 0777) = 0 [ 282.522355][T10878] loop0: detected capacity change from 0 to 512 [ 282.532952][T10878] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10880 attached , child_tidptr=0x555556d60690) = 10880 [pid 10880] set_robust_list(0x555556d606a0, 24) = 0 [pid 10880] chdir("./1292") = 0 [pid 10880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10880] setpgid(0, 0) = 0 [pid 10880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10880] write(3, "1000", 4) = 4 [pid 10880] close(3) = 0 [pid 10880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10880] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10880] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10880] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10880] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10880] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10880] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10881]}, 88) = 10881 ./strace-static-x86_64: Process 10881 attached [pid 10881] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10880] rt_sigprocmask(SIG_SETMASK, [], [pid 10881] set_robust_list(0x7f55300e29a0, 24 [pid 10880] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10881] <... set_robust_list resumed>) = 0 [pid 10881] rt_sigprocmask(SIG_SETMASK, [], [pid 10880] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10880] <... futex resumed>) = 0 [pid 10881] memfd_create("syzkaller", 0 [pid 10880] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10881] <... memfd_create resumed>) = 3 [pid 10881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10880] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10881] <... mmap resumed>) = 0x7f5527cc2000 [pid 10880] <... mmap resumed>) = 0x7f5527ca1000 [pid 10880] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10880] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10880] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10882 attached [pid 10882] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10880] <... clone3 resumed> => {parent_tid=[10882]}, 88) = 10882 [pid 10882] <... rseq resumed>) = 0 [pid 10880] rt_sigprocmask(SIG_SETMASK, [], [pid 10882] set_robust_list(0x7f5527cc19a0, 24) = 0 [pid 10880] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10882] rt_sigprocmask(SIG_SETMASK, [], [pid 10880] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10882] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10880] <... futex resumed>) = 0 [pid 10882] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10880] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10882] <... open resumed>) = 4 [pid 10882] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10880] <... futex resumed>) = 0 [pid 10880] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10880] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10882] <... futex resumed>) = 1 [pid 10882] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10882] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10880] <... futex resumed>) = 0 [pid 10882] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10880] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10882] <... open resumed>) = 5 [pid 10880] <... futex resumed>) = 0 [pid 10880] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10882] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10880] <... futex resumed>) = 0 [pid 10882] <... futex resumed>) = 1 [pid 10880] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10882] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10880] <... futex resumed>) = 0 [pid 10882] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10880] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10882] <... futex resumed>) = 0 [pid 10881] <... write resumed>) = 262144 [pid 10882] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10881] munmap(0x7f5527cc2000, 262144 [pid 10880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10881] <... munmap resumed>) = 0 [pid 10881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10881] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10881] close(3) = 0 [pid 10881] mkdir("./file1", 0777) = 0 [pid 10881] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10881] ioctl(6, LOOP_CLR_FD) = 0 [pid 10881] close(6) = 0 [pid 10881] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10880] exit_group(0 [pid 10882] <... futex resumed>) = ? [pid 10880] <... exit_group resumed>) = ? [pid 10882] +++ exited with 0 +++ [pid 10881] <... futex resumed>) = ? [pid 10881] +++ exited with 0 +++ [pid 10880] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10880, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1292", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1292/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1292/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1292/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1292/bus") = 0 [pid 5052] umount2("./1292/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1292/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1292/binderfs") = 0 [pid 5052] umount2("./1292/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1292/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1292/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1292/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1292/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1292") = 0 [pid 5052] mkdir("./1293", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 282.633878][T10881] loop0: detected capacity change from 0 to 512 [ 282.644265][T10881] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10883 attached , child_tidptr=0x555556d60690) = 10883 [pid 10883] set_robust_list(0x555556d606a0, 24) = 0 [pid 10883] chdir("./1293") = 0 [pid 10883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10883] setpgid(0, 0) = 0 [pid 10883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10883] write(3, "1000", 4) = 4 [pid 10883] close(3) = 0 [pid 10883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10883] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10883] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10883] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10883] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10883] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10883] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10884 attached => {parent_tid=[10884]}, 88) = 10884 [pid 10884] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10883] rt_sigprocmask(SIG_SETMASK, [], [pid 10884] <... rseq resumed>) = 0 [pid 10883] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10884] set_robust_list(0x7f55300e29a0, 24 [pid 10883] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10884] <... set_robust_list resumed>) = 0 [pid 10883] <... futex resumed>) = 0 [pid 10884] rt_sigprocmask(SIG_SETMASK, [], [pid 10883] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10883] <... futex resumed>) = 0 [pid 10884] memfd_create("syzkaller", 0 [pid 10883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10883] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10884] <... memfd_create resumed>) = 3 [pid 10884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10883] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10883] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10885 attached => {parent_tid=[10885]}, 88) = 10885 [pid 10885] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10883] rt_sigprocmask(SIG_SETMASK, [], [pid 10885] set_robust_list(0x7f55300c19a0, 24 [pid 10883] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10885] <... set_robust_list resumed>) = 0 [pid 10883] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10883] <... futex resumed>) = 0 [pid 10885] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10883] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10885] <... open resumed>) = 4 [pid 10884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10885] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10883] <... futex resumed>) = 0 [pid 10885] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10883] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10883] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10885] <... futex resumed>) = 0 [pid 10885] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10884] <... write resumed>) = 262144 [pid 10884] munmap(0x7f5527ca1000, 262144 [pid 10885] <... mount resumed>) = 0 [pid 10885] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10883] <... futex resumed>) = 0 [pid 10885] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10883] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10883] <... futex resumed>) = 0 [pid 10883] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10884] <... munmap resumed>) = 0 [pid 10885] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10884] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10885] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10884] <... openat resumed>) = 6 [pid 10885] <... futex resumed>) = 1 [pid 10883] <... futex resumed>) = 0 [pid 10885] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10883] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10884] ioctl(6, LOOP_SET_FD, 3 [pid 10883] <... futex resumed>) = 0 [pid 10885] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10884] <... ioctl resumed>) = 0 [pid 10883] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10884] close(3) = 0 [pid 10884] mkdir("./file1", 0777) = 0 [pid 10884] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10884] ioctl(6, LOOP_CLR_FD) = 0 [pid 10884] close(6) = 0 [pid 10884] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10884] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10885] <... write resumed>) = 262144 [pid 10885] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10883] <... futex resumed>) = 0 [pid 10883] exit_group(0) = ? [pid 10884] <... futex resumed>) = ? [pid 10884] +++ exited with 0 +++ [pid 10885] <... futex resumed>) = ? [pid 10885] +++ exited with 0 +++ [pid 10883] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10883, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1293", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1293/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1293/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1293/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1293/bus") = 0 [pid 5052] umount2("./1293/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1293/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1293/binderfs") = 0 [pid 5052] umount2("./1293/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1293/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1293/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1293/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1293/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1293") = 0 [pid 5052] mkdir("./1294", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10886 attached , child_tidptr=0x555556d60690) = 10886 [pid 10886] set_robust_list(0x555556d606a0, 24) = 0 [pid 10886] chdir("./1294") = 0 [pid 10886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10886] setpgid(0, 0) = 0 [pid 10886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10886] write(3, "1000", 4) = 4 [pid 10886] close(3) = 0 [pid 10886] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10886] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10886] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10886] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10886] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [ 282.746889][T10884] loop0: detected capacity change from 0 to 512 [ 282.757947][T10884] ext4: Unknown parameter 'nouser_xattr' [pid 10886] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10886] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10887 attached [pid 10887] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10886] <... clone3 resumed> => {parent_tid=[10887]}, 88) = 10887 [pid 10887] set_robust_list(0x7f55300e29a0, 24 [pid 10886] rt_sigprocmask(SIG_SETMASK, [], [pid 10887] <... set_robust_list resumed>) = 0 [pid 10887] rt_sigprocmask(SIG_SETMASK, [], [pid 10886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10886] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10887] memfd_create("syzkaller", 0 [pid 10886] <... futex resumed>) = 0 [pid 10886] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10887] <... memfd_create resumed>) = 3 [pid 10886] <... mmap resumed>) = 0x7f55300a1000 [pid 10887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10886] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10886] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10886] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10888]}, 88) = 10888 ./strace-static-x86_64: Process 10888 attached [pid 10886] rt_sigprocmask(SIG_SETMASK, [], [pid 10888] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10886] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10888] <... rseq resumed>) = 0 [pid 10886] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10888] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10888] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10888] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10888] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10886] <... futex resumed>) = 0 [pid 10886] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10888] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10886] <... futex resumed>) = 0 [pid 10886] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10888] <... mount resumed>) = 0 [pid 10888] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10886] <... futex resumed>) = 0 [pid 10888] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10887] <... write resumed>) = 262144 [pid 10886] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10888] <... open resumed>) = 5 [pid 10888] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10888] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 10886] <... futex resumed>) = 1 [pid 10886] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10886] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10887] munmap(0x7f5527ca1000, 262144 [pid 10886] <... futex resumed>) = 0 [pid 10887] <... munmap resumed>) = 0 [pid 10886] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10888] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10888] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10888] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10886] <... futex resumed>) = 0 [pid 10887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10887] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10887] close(3) = 0 [pid 10887] mkdir("./file1", 0777) = 0 [pid 10887] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10887] ioctl(6, LOOP_CLR_FD) = 0 [pid 10887] close(6) = 0 [pid 10887] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10887] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10886] exit_group(0) = ? [pid 10887] <... futex resumed>) = ? [pid 10887] +++ exited with 0 +++ [pid 10888] <... futex resumed>) = ? [pid 10888] +++ exited with 0 +++ [pid 10886] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10886, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1294", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1294/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1294/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1294/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1294/bus") = 0 [pid 5052] umount2("./1294/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1294/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1294/binderfs") = 0 [pid 5052] umount2("./1294/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1294/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1294/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1294/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1294/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1294") = 0 [pid 5052] mkdir("./1295", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10889 attached , child_tidptr=0x555556d60690) = 10889 [pid 10889] set_robust_list(0x555556d606a0, 24) = 0 [pid 10889] chdir("./1295") = 0 [pid 10889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10889] setpgid(0, 0) = 0 [pid 10889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10889] write(3, "1000", 4) = 4 [pid 10889] close(3) = 0 [pid 10889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10889] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10889] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10889] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10889] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10889] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10890]}, 88) = 10890 [pid 10889] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10890 attached NULL, 8) = 0 [pid 10890] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10889] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10890] <... rseq resumed>) = 0 [pid 10889] <... futex resumed>) = 0 [pid 10890] set_robust_list(0x7f55300e29a0, 24 [pid 10889] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10890] <... set_robust_list resumed>) = 0 [pid 10889] <... futex resumed>) = 0 [pid 10890] rt_sigprocmask(SIG_SETMASK, [], [pid 10889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10889] <... mmap resumed>) = 0x7f55300a1000 [pid 10890] memfd_create("syzkaller", 0 [pid 10889] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10890] <... memfd_create resumed>) = 3 [pid 10890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10889] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10890] <... mmap resumed>) = 0x7f5527ca1000 [pid 10889] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10889] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10891 attached => {parent_tid=[10891]}, 88) = 10891 [pid 10889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10889] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10889] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10891] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [ 282.827599][T10887] loop0: detected capacity change from 0 to 512 [ 282.838160][T10887] ext4: Unknown parameter 'nouser_xattr' [pid 10891] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10891] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10891] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10890] <... write resumed>) = 262144 [pid 10890] munmap(0x7f5527ca1000, 262144) = 0 [pid 10890] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10891] <... open resumed>) = 4 [pid 10890] <... openat resumed>) = 5 [pid 10891] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10890] ioctl(5, LOOP_SET_FD, 3 [pid 10891] <... futex resumed>) = 1 [pid 10889] <... futex resumed>) = 0 [pid 10891] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10889] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10891] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10889] <... futex resumed>) = 0 [pid 10889] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10891] <... mount resumed>) = 0 [pid 10891] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10891] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10889] <... futex resumed>) = 0 [pid 10890] <... ioctl resumed>) = 0 [pid 10889] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10890] close(3 [pid 10891] <... futex resumed>) = 0 [pid 10890] <... close resumed>) = 0 [pid 10889] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10890] mkdir("./file1", 0777 [pid 10891] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10891] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10890] <... mkdir resumed>) = 0 [pid 10891] <... futex resumed>) = 1 [pid 10889] <... futex resumed>) = 0 [pid 10890] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10891] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10889] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10889] <... futex resumed>) = 0 [pid 10890] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10889] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10890] ioctl(5, LOOP_CLR_FD) = 0 [pid 10890] close(5 [pid 10891] <... write resumed>) = 262144 [pid 10890] <... close resumed>) = 0 [pid 10891] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10890] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10889] <... futex resumed>) = 0 [pid 10891] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10889] exit_group(0 [pid 10891] <... futex resumed>) = ? [pid 10890] <... futex resumed>) = ? [pid 10889] <... exit_group resumed>) = ? [pid 10891] +++ exited with 0 +++ [pid 10890] +++ exited with 0 +++ [pid 10889] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10889, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1295", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1295/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1295/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1295/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1295/bus") = 0 [pid 5052] umount2("./1295/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1295/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1295/binderfs") = 0 [pid 5052] umount2("./1295/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1295/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1295/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1295/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1295/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 282.896267][T10890] loop0: detected capacity change from 0 to 512 [ 282.907713][T10890] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1295") = 0 [pid 5052] mkdir("./1296", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10892 attached , child_tidptr=0x555556d60690) = 10892 [pid 10892] set_robust_list(0x555556d606a0, 24) = 0 [pid 10892] chdir("./1296") = 0 [pid 10892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10892] setpgid(0, 0) = 0 [pid 10892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10892] write(3, "1000", 4) = 4 [pid 10892] close(3) = 0 [pid 10892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10892] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10892] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10892] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10892] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10892] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10893 attached => {parent_tid=[10893]}, 88) = 10893 [pid 10892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10892] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10892] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10892] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10892] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10892] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10893] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10893] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 10894 attached [pid 10893] memfd_create("syzkaller", 0 [pid 10892] <... clone3 resumed> => {parent_tid=[10894]}, 88) = 10894 [pid 10893] <... memfd_create resumed>) = 3 [pid 10894] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10894] <... rseq resumed>) = 0 [pid 10892] rt_sigprocmask(SIG_SETMASK, [], [pid 10894] set_robust_list(0x7f55300c19a0, 24 [pid 10893] <... mmap resumed>) = 0x7f5527ca1000 [pid 10894] <... set_robust_list resumed>) = 0 [pid 10894] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10894] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10892] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10892] <... futex resumed>) = 0 [pid 10894] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10892] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10894] <... open resumed>) = 4 [pid 10894] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10892] <... futex resumed>) = 0 [pid 10894] <... futex resumed>) = 1 [pid 10892] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10894] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10892] <... futex resumed>) = 0 [pid 10892] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10894] <... mount resumed>) = 0 [pid 10893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10894] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10892] <... futex resumed>) = 0 [pid 10894] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10892] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10892] <... futex resumed>) = 0 [pid 10894] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10892] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10894] <... open resumed>) = 5 [pid 10894] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10892] <... futex resumed>) = 0 [pid 10894] <... futex resumed>) = 1 [pid 10894] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10892] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10894] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10894] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10892] <... futex resumed>) = 0 [pid 10894] <... futex resumed>) = 0 [pid 10892] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10894] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10892] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10893] <... write resumed>) = 262144 [pid 10893] munmap(0x7f5527ca1000, 262144) = 0 [pid 10893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10893] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10893] close(3) = 0 [pid 10893] mkdir("./file1", 0777) = 0 [pid 10893] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10893] ioctl(6, LOOP_CLR_FD) = 0 [pid 10893] close(6) = 0 [pid 10893] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10893] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10892] exit_group(0 [pid 10894] <... futex resumed>) = ? [pid 10893] <... futex resumed>) = ? [pid 10894] +++ exited with 0 +++ [pid 10893] +++ exited with 0 +++ [pid 10892] <... exit_group resumed>) = ? [pid 10892] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10892, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1296", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1296/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1296/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1296/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1296/bus") = 0 [pid 5052] umount2("./1296/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1296/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1296/binderfs") = 0 [pid 5052] umount2("./1296/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1296/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1296/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1296/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1296/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1296") = 0 [ 283.002218][T10893] loop0: detected capacity change from 0 to 512 [ 283.012245][T10893] ext4: Unknown parameter 'nouser_xattr' [pid 5052] mkdir("./1297", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10895 ./strace-static-x86_64: Process 10895 attached [pid 10895] set_robust_list(0x555556d606a0, 24) = 0 [pid 10895] chdir("./1297") = 0 [pid 10895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10895] setpgid(0, 0) = 0 [pid 10895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10895] write(3, "1000", 4) = 4 [pid 10895] close(3) = 0 [pid 10895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10895] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10895] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10895] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10895] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10895] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10895] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10896 attached [pid 10896] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10895] <... clone3 resumed> => {parent_tid=[10896]}, 88) = 10896 [pid 10896] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10895] rt_sigprocmask(SIG_SETMASK, [], [pid 10896] rt_sigprocmask(SIG_SETMASK, [], [pid 10895] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10896] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10895] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10896] memfd_create("syzkaller", 0 [pid 10895] <... futex resumed>) = 0 [pid 10895] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10896] <... memfd_create resumed>) = 3 [pid 10895] <... futex resumed>) = 0 [pid 10895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10895] <... mmap resumed>) = 0x7f55300a1000 [pid 10896] <... mmap resumed>) = 0x7f5527ca1000 [pid 10896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10895] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10895] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10895] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10897]}, 88) = 10897 [pid 10895] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10895] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10895] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10897 attached [pid 10897] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10897] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10897] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10897] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10896] <... write resumed>) = 262144 [pid 10897] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10897] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10895] <... futex resumed>) = 0 [pid 10896] munmap(0x7f5527ca1000, 262144 [pid 10895] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10897] <... futex resumed>) = 0 [pid 10895] <... futex resumed>) = 1 [pid 10897] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10895] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10896] <... munmap resumed>) = 0 [pid 10897] <... mount resumed>) = 0 [pid 10896] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10897] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10895] <... futex resumed>) = 0 [pid 10895] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10895] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10897] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10896] ioctl(5, LOOP_SET_FD, 3 [pid 10897] <... open resumed>) = 6 [pid 10897] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10895] <... futex resumed>) = 0 [pid 10895] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10897] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10895] <... futex resumed>) = 0 [pid 10896] <... ioctl resumed>) = 0 [pid 10895] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10896] close(3) = 0 [pid 10896] mkdir("./file1", 0777) = 0 [pid 10896] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10896] ioctl(5, LOOP_CLR_FD) = 0 [pid 10896] close(5) = 0 [pid 10896] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10897] <... write resumed>) = 262144 [pid 10897] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10896] <... futex resumed>) = 0 [pid 10897] <... futex resumed>) = 1 [pid 10895] <... futex resumed>) = 0 [pid 10897] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10895] exit_group(0 [pid 10897] <... futex resumed>) = ? [pid 10895] <... exit_group resumed>) = ? [pid 10896] +++ exited with 0 +++ [pid 10897] +++ exited with 0 +++ [pid 10895] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10895, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1297", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1297/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1297/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1297/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1297/bus") = 0 [pid 5052] umount2("./1297/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1297/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1297/binderfs") = 0 [pid 5052] umount2("./1297/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1297/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1297/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1297/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1297/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1297") = 0 [pid 5052] mkdir("./1298", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10898 attached , child_tidptr=0x555556d60690) = 10898 [pid 10898] set_robust_list(0x555556d606a0, 24) = 0 [pid 10898] chdir("./1298") = 0 [pid 10898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10898] setpgid(0, 0) = 0 [pid 10898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10898] write(3, "1000", 4) = 4 [pid 10898] close(3) = 0 [ 283.113980][T10896] loop0: detected capacity change from 0 to 512 [ 283.126198][T10896] ext4: Unknown parameter 'nouser_xattr' [pid 10898] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10898] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10898] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10898] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10898] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10898] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10898] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10899 attached => {parent_tid=[10899]}, 88) = 10899 [pid 10899] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10898] rt_sigprocmask(SIG_SETMASK, [], [pid 10899] set_robust_list(0x7f55300e29a0, 24 [pid 10898] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10899] <... set_robust_list resumed>) = 0 [pid 10898] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10899] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10898] <... futex resumed>) = 0 [pid 10898] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10899] memfd_create("syzkaller", 0 [pid 10898] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10899] <... memfd_create resumed>) = 3 [pid 10898] <... mmap resumed>) = 0x7f55300a1000 [pid 10899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10898] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10898] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10898] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10898] <... clone3 resumed> => {parent_tid=[10900]}, 88) = 10900 [pid 10898] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10898] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10898] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10900 attached [pid 10900] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10899] <... write resumed>) = 262144 [pid 10900] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10900] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10900] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10899] munmap(0x7f5527ca1000, 262144 [pid 10900] <... open resumed>) = 4 [pid 10900] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10898] <... futex resumed>) = 0 [pid 10900] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10898] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10898] <... futex resumed>) = 0 [pid 10900] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10899] <... munmap resumed>) = 0 [pid 10898] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10900] <... mount resumed>) = 0 [pid 10900] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10898] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10900] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10898] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10900] <... futex resumed>) = 0 [pid 10899] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10898] <... futex resumed>) = 1 [pid 10900] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10899] <... openat resumed>) = 5 [pid 10898] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10900] <... open resumed>) = 6 [pid 10900] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10899] ioctl(5, LOOP_SET_FD, 3 [pid 10898] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10900] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10899] <... ioctl resumed>) = 0 [pid 10898] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10899] close(3 [pid 10898] <... futex resumed>) = 0 [pid 10900] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10899] <... close resumed>) = 0 [pid 10898] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10899] mkdir("./file1", 0777) = 0 [pid 10899] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10899] ioctl(5, LOOP_CLR_FD) = 0 [pid 10899] close(5) = 0 [pid 10899] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10899] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10900] <... write resumed>) = 262144 [pid 10900] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10900] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10898] <... futex resumed>) = 0 [pid 10898] exit_group(0 [pid 10900] <... futex resumed>) = ? [pid 10900] +++ exited with 0 +++ [pid 10898] <... exit_group resumed>) = ? [pid 10899] <... futex resumed>) = ? [pid 10899] +++ exited with 0 +++ [pid 10898] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10898, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1298", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1298/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1298/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1298/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1298/bus") = 0 [pid 5052] umount2("./1298/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1298/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1298/binderfs") = 0 [pid 5052] umount2("./1298/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1298/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1298/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1298/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1298/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 283.193798][T10899] loop0: detected capacity change from 0 to 512 [ 283.204569][T10899] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1298") = 0 [pid 5052] mkdir("./1299", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10901 ./strace-static-x86_64: Process 10901 attached [pid 10901] set_robust_list(0x555556d606a0, 24) = 0 [pid 10901] chdir("./1299") = 0 [pid 10901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10901] setpgid(0, 0) = 0 [pid 10901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10901] write(3, "1000", 4) = 4 [pid 10901] close(3) = 0 [pid 10901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10901] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10901] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10901] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10901] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10901] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10901] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10902 attached [pid 10902] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10901] <... clone3 resumed> => {parent_tid=[10902]}, 88) = 10902 [pid 10901] rt_sigprocmask(SIG_SETMASK, [], [pid 10902] set_robust_list(0x7f55300e29a0, 24 [pid 10901] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10902] <... set_robust_list resumed>) = 0 [pid 10902] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10902] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10901] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10902] <... futex resumed>) = 0 [pid 10901] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10902] memfd_create("syzkaller", 0 [pid 10901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10901] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10902] <... memfd_create resumed>) = 3 [pid 10902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10901] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10901] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10903 attached [pid 10903] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10901] <... clone3 resumed> => {parent_tid=[10903]}, 88) = 10903 [pid 10903] set_robust_list(0x7f55300c19a0, 24 [pid 10901] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10903] <... set_robust_list resumed>) = 0 [pid 10901] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10903] rt_sigprocmask(SIG_SETMASK, [], [pid 10901] <... futex resumed>) = 0 [pid 10903] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10901] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10903] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10903] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10901] <... futex resumed>) = 0 [pid 10901] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10903] <... futex resumed>) = 1 [pid 10901] <... futex resumed>) = 0 [pid 10903] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10901] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10903] <... mount resumed>) = 0 [pid 10903] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10901] <... futex resumed>) = 0 [pid 10901] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10901] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10903] <... futex resumed>) = 1 [pid 10903] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10903] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10901] <... futex resumed>) = 0 [pid 10903] <... futex resumed>) = 1 [pid 10901] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10903] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10901] <... futex resumed>) = 0 [pid 10903] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10901] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10903] <... futex resumed>) = 0 [pid 10901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10903] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10902] <... write resumed>) = 262144 [pid 10902] munmap(0x7f5527ca1000, 262144) = 0 [pid 10902] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10902] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10902] close(3) = 0 [pid 10902] mkdir("./file1", 0777) = 0 [pid 10902] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10902] ioctl(6, LOOP_CLR_FD) = 0 [pid 10902] close(6) = 0 [pid 10902] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10902] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10901] exit_group(0) = ? [pid 10903] <... futex resumed>) = ? [pid 10902] <... futex resumed>) = ? [pid 10903] +++ exited with 0 +++ [pid 10902] +++ exited with 0 +++ [pid 10901] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10901, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1299", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1299/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1299/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1299/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1299/bus") = 0 [pid 5052] umount2("./1299/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1299/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1299/binderfs") = 0 [pid 5052] umount2("./1299/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1299/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1299/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1299/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1299/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1299") = 0 [pid 5052] mkdir("./1300", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 283.315039][T10902] loop0: detected capacity change from 0 to 512 [ 283.325504][T10902] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10904 ./strace-static-x86_64: Process 10904 attached [pid 10904] set_robust_list(0x555556d606a0, 24) = 0 [pid 10904] chdir("./1300") = 0 [pid 10904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10904] setpgid(0, 0) = 0 [pid 10904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10904] write(3, "1000", 4) = 4 [pid 10904] close(3) = 0 [pid 10904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10904] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10904] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10904] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10904] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10904] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10904] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10905 attached [pid 10905] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10904] <... clone3 resumed> => {parent_tid=[10905]}, 88) = 10905 [pid 10905] set_robust_list(0x7f55300e29a0, 24 [pid 10904] rt_sigprocmask(SIG_SETMASK, [], [pid 10905] <... set_robust_list resumed>) = 0 [pid 10904] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10905] rt_sigprocmask(SIG_SETMASK, [], [pid 10904] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10904] <... futex resumed>) = 0 [pid 10905] memfd_create("syzkaller", 0 [pid 10904] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10905] <... memfd_create resumed>) = 3 [pid 10905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10904] <... mmap resumed>) = 0x7f55300a1000 [pid 10904] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10904] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10904] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10906]}, 88) = 10906 [pid 10904] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10904] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 10906 attached [pid 10905] <... write resumed>) = 262144 [pid 10904] <... futex resumed>) = 0 [pid 10906] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10906] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10906] rt_sigprocmask(SIG_SETMASK, [], [pid 10904] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10906] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10906] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10905] munmap(0x7f5527ca1000, 262144 [pid 10906] <... open resumed>) = 4 [pid 10906] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10904] <... futex resumed>) = 0 [pid 10904] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10906] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10904] <... futex resumed>) = 0 [pid 10905] <... munmap resumed>) = 0 [pid 10906] <... mount resumed>) = 0 [pid 10904] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10905] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10906] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10905] <... openat resumed>) = 5 [pid 10906] <... futex resumed>) = 1 [pid 10904] <... futex resumed>) = 0 [pid 10905] ioctl(5, LOOP_SET_FD, 3 [pid 10904] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10904] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10906] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10906] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10904] <... futex resumed>) = 0 [pid 10904] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10904] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10906] <... futex resumed>) = 1 [pid 10906] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10906] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10904] <... futex resumed>) = 0 [pid 10906] <... futex resumed>) = 1 [pid 10906] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10905] <... ioctl resumed>) = 0 [pid 10905] close(3) = 0 [pid 10905] mkdir("./file1", 0777) = 0 [pid 10905] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10905] ioctl(5, LOOP_CLR_FD) = 0 [pid 10905] close(5) = 0 [pid 10905] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10905] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10904] exit_group(0 [pid 10905] <... futex resumed>) = ? [pid 10906] <... futex resumed>) = ? [pid 10904] <... exit_group resumed>) = ? [pid 10905] +++ exited with 0 +++ [pid 10906] +++ exited with 0 +++ [pid 10904] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10904, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1300", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1300/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1300/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1300/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1300/bus") = 0 [pid 5052] umount2("./1300/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1300/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1300/binderfs") = 0 [pid 5052] umount2("./1300/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1300/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1300/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1300/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1300/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1300") = 0 [pid 5052] mkdir("./1301", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10907 attached , child_tidptr=0x555556d60690) = 10907 [pid 10907] set_robust_list(0x555556d606a0, 24) = 0 [pid 10907] chdir("./1301") = 0 [pid 10907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10907] setpgid(0, 0) = 0 [pid 10907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10907] write(3, "1000", 4) = 4 [pid 10907] close(3) = 0 [ 283.431599][T10905] loop0: detected capacity change from 0 to 512 [ 283.441403][T10905] ext4: Unknown parameter 'nouser_xattr' [pid 10907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10907] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10907] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10907] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10907] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10908]}, 88) = 10908 [pid 10907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10907] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10907] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10907] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10907] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10909]}, 88) = 10909 [pid 10907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10907] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10907] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10909 attached [pid 10909] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10909] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10909] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10909] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 3 [pid 10909] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10907] <... futex resumed>) = 0 [pid 10909] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10907] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10909] <... mount resumed>) = 0 [pid 10907] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10908 attached [pid 10909] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10907] <... futex resumed>) = 0 [pid 10907] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10907] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10909] <... futex resumed>) = 1 [pid 10909] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10908] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10908] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10908] memfd_create("syzkaller", 0) = 5 [pid 10908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10908] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10909] <... open resumed>) = 4 [pid 10909] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10907] <... futex resumed>) = 0 [pid 10907] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10909] <... futex resumed>) = 1 [pid 10908] <... write resumed>) = 262144 [pid 10907] <... futex resumed>) = 0 [pid 10908] munmap(0x7f5527ca1000, 262144 [pid 10909] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10907] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10909] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10909] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10907] <... futex resumed>) = 0 [pid 10909] <... futex resumed>) = 1 [pid 10909] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10908] <... munmap resumed>) = 0 [pid 10908] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10908] ioctl(6, LOOP_SET_FD, 5) = 0 [pid 10908] close(5) = 0 [pid 10908] mkdir("./file1", 0777) = 0 [pid 10908] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10908] ioctl(6, LOOP_CLR_FD) = 0 [pid 10908] close(6) = 0 [pid 10908] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10908] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10907] exit_group(0) = ? [pid 10909] <... futex resumed>) = ? [pid 10909] +++ exited with 0 +++ [pid 10908] <... futex resumed>) = ? [pid 10908] +++ exited with 0 +++ [pid 10907] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10907, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1301", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1301/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1301/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1301/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1301/bus") = 0 [pid 5052] umount2("./1301/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1301/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1301/binderfs") = 0 [pid 5052] umount2("./1301/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1301/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1301/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1301/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1301") = 0 [pid 5052] mkdir("./1302", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10910 attached , child_tidptr=0x555556d60690) = 10910 [pid 10910] set_robust_list(0x555556d606a0, 24) = 0 [pid 10910] chdir("./1302") = 0 [pid 10910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10910] setpgid(0, 0) = 0 [pid 10910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10910] write(3, "1000", 4) = 4 [pid 10910] close(3) = 0 [pid 10910] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10910] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10910] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10910] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10910] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [ 283.538792][T10908] loop0: detected capacity change from 0 to 512 [ 283.547762][T10908] ext4: Unknown parameter 'nouser_xattr' [pid 10910] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10911 attached [pid 10911] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10910] <... clone3 resumed> => {parent_tid=[10911]}, 88) = 10911 [pid 10911] set_robust_list(0x7f55300e29a0, 24 [pid 10910] rt_sigprocmask(SIG_SETMASK, [], [pid 10911] <... set_robust_list resumed>) = 0 [pid 10911] rt_sigprocmask(SIG_SETMASK, [], [pid 10910] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10910] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10911] memfd_create("syzkaller", 0 [pid 10910] <... futex resumed>) = 0 [pid 10910] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10911] <... memfd_create resumed>) = 3 [pid 10910] <... mmap resumed>) = 0x7f55300a1000 [pid 10911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10910] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10910] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10912]}, 88) = 10912 [pid 10910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10910] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10912 attached [pid 10910] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10912] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10912] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10912] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10912] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10912] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10912] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10910] <... futex resumed>) = 0 [pid 10910] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10910] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10912] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10912] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10911] <... write resumed>) = 262144 [pid 10911] munmap(0x7f5527ca1000, 262144 [pid 10912] <... futex resumed>) = 1 [pid 10910] <... futex resumed>) = 0 [pid 10911] <... munmap resumed>) = 0 [pid 10910] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10910] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10912] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10911] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10911] ioctl(5, LOOP_SET_FD, 3 [pid 10912] <... open resumed>) = 6 [pid 10912] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10912] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10910] <... futex resumed>) = 0 [pid 10911] <... ioctl resumed>) = 0 [pid 10910] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10911] close(3 [pid 10910] <... futex resumed>) = 1 [pid 10912] <... futex resumed>) = 0 [pid 10910] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10912] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10911] <... close resumed>) = 0 [pid 10911] mkdir("./file1", 0777) = 0 [pid 10911] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10912] <... write resumed>) = 262144 [pid 10911] ioctl(5, LOOP_CLR_FD) = 0 [pid 10911] close(5) = 0 [pid 10911] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10911] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10912] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10910] <... futex resumed>) = 0 [pid 10912] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10910] exit_group(0 [pid 10912] <... futex resumed>) = ? [pid 10910] <... exit_group resumed>) = ? [pid 10912] +++ exited with 0 +++ [pid 10911] <... futex resumed>) = ? [pid 10911] +++ exited with 0 +++ [pid 10910] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10910, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1302", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1302/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1302/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1302/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1302/bus") = 0 [pid 5052] umount2("./1302/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1302/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1302/binderfs") = 0 [pid 5052] umount2("./1302/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1302/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1302/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 283.616205][T10911] loop0: detected capacity change from 0 to 512 [ 283.630210][T10911] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1302/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1302") = 0 [pid 5052] mkdir("./1303", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10913 attached , child_tidptr=0x555556d60690) = 10913 [pid 10913] set_robust_list(0x555556d606a0, 24) = 0 [pid 10913] chdir("./1303") = 0 [pid 10913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10913] setpgid(0, 0) = 0 [pid 10913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10913] write(3, "1000", 4) = 4 [pid 10913] close(3) = 0 [pid 10913] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10913] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10913] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10913] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10913] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10913] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10913] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10914 attached [pid 10914] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10913] <... clone3 resumed> => {parent_tid=[10914]}, 88) = 10914 [pid 10914] <... rseq resumed>) = 0 [pid 10913] rt_sigprocmask(SIG_SETMASK, [], [pid 10914] set_robust_list(0x7f55300e29a0, 24 [pid 10913] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10914] <... set_robust_list resumed>) = 0 [pid 10914] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10913] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10914] memfd_create("syzkaller", 0 [pid 10913] <... futex resumed>) = 0 [pid 10913] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10914] <... memfd_create resumed>) = 3 [pid 10913] <... mmap resumed>) = 0x7f55300a1000 [pid 10914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10913] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10914] <... mmap resumed>) = 0x7f5527ca1000 [pid 10913] <... mprotect resumed>) = 0 [pid 10914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10913] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10913] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10915]}, 88) = 10915 [pid 10913] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10915 attached [pid 10915] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10913] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10915] <... rseq resumed>) = 0 [pid 10915] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10913] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10915] rt_sigprocmask(SIG_SETMASK, [], [pid 10914] <... write resumed>) = 262144 [pid 10913] <... futex resumed>) = 0 [pid 10915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10915] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10913] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10914] munmap(0x7f5527ca1000, 262144 [pid 10915] <... open resumed>) = 4 [pid 10914] <... munmap resumed>) = 0 [pid 10915] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10913] <... futex resumed>) = 0 [pid 10915] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10913] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10914] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10913] <... futex resumed>) = 0 [pid 10915] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10913] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10915] <... mount resumed>) = 0 [pid 10914] <... openat resumed>) = 5 [pid 10914] ioctl(5, LOOP_SET_FD, 3 [pid 10915] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10915] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10913] <... futex resumed>) = 0 [pid 10913] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10915] <... futex resumed>) = 0 [pid 10913] <... futex resumed>) = 1 [pid 10915] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10913] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10915] <... open resumed>) = 6 [pid 10915] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10913] <... futex resumed>) = 0 [pid 10915] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10913] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10915] <... futex resumed>) = 0 [pid 10913] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10915] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10914] <... ioctl resumed>) = 0 [pid 10914] close(3) = 0 [pid 10914] mkdir("./file1", 0777) = 0 [pid 10914] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10914] ioctl(5, LOOP_CLR_FD) = 0 [pid 10914] close(5) = 0 [pid 10914] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10914] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10915] <... write resumed>) = 262144 [pid 10915] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10913] <... futex resumed>) = 0 [pid 10915] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10913] exit_group(0 [pid 10915] <... futex resumed>) = ? [pid 10913] <... exit_group resumed>) = ? [pid 10914] <... futex resumed>) = ? [pid 10915] +++ exited with 0 +++ [pid 10914] +++ exited with 0 +++ [pid 10913] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10913, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1303", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [ 283.720368][T10914] loop0: detected capacity change from 0 to 512 [ 283.736120][T10914] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1303/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1303/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1303/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1303/bus") = 0 [pid 5052] umount2("./1303/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1303/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1303/binderfs") = 0 [pid 5052] umount2("./1303/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1303/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1303/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1303/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1303") = 0 [pid 5052] mkdir("./1304", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10916 ./strace-static-x86_64: Process 10916 attached [pid 10916] set_robust_list(0x555556d606a0, 24) = 0 [pid 10916] chdir("./1304") = 0 [pid 10916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10916] setpgid(0, 0) = 0 [pid 10916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10916] write(3, "1000", 4) = 4 [pid 10916] close(3) = 0 [pid 10916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10916] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10916] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10916] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10916] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10917 attached [pid 10917] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10916] <... clone3 resumed> => {parent_tid=[10917]}, 88) = 10917 [pid 10917] <... rseq resumed>) = 0 [pid 10916] rt_sigprocmask(SIG_SETMASK, [], [pid 10917] set_robust_list(0x7f55300e29a0, 24 [pid 10916] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10917] <... set_robust_list resumed>) = 0 [pid 10916] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10917] rt_sigprocmask(SIG_SETMASK, [], [pid 10916] <... futex resumed>) = 0 [pid 10917] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10916] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10917] memfd_create("syzkaller", 0 [pid 10916] <... futex resumed>) = 0 [pid 10916] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10917] <... memfd_create resumed>) = 3 [pid 10917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10916] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10917] <... mmap resumed>) = 0x7f5527ca1000 [pid 10916] <... mprotect resumed>) = 0 [pid 10917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10916] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10916] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10918]}, 88) = 10918 [pid 10916] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10916] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10916] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10918 attached [pid 10918] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10918] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10918] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10918] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10917] <... write resumed>) = 262144 [pid 10918] <... open resumed>) = 4 [pid 10918] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10916] <... futex resumed>) = 0 [pid 10918] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10917] munmap(0x7f5527ca1000, 262144 [pid 10916] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10918] <... futex resumed>) = 0 [pid 10916] <... futex resumed>) = 1 [pid 10918] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10916] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10917] <... munmap resumed>) = 0 [pid 10917] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10918] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10916] <... futex resumed>) = 0 [pid 10916] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10918] <... futex resumed>) = 1 [pid 10917] <... openat resumed>) = 5 [pid 10916] <... futex resumed>) = 0 [pid 10918] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10916] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10918] <... open resumed>) = 6 [pid 10918] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10917] ioctl(5, LOOP_SET_FD, 3 [pid 10916] <... futex resumed>) = 0 [pid 10918] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10916] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10916] <... futex resumed>) = 0 [pid 10918] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10916] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10917] <... ioctl resumed>) = 0 [pid 10917] close(3) = 0 [pid 10917] mkdir("./file1", 0777) = 0 [pid 10917] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10917] ioctl(5, LOOP_CLR_FD) = 0 [pid 10917] close(5) = 0 [pid 10917] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10917] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10918] <... write resumed>) = -1 EIO (Input/output error) [pid 10918] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10916] <... futex resumed>) = 0 [pid 10916] exit_group(0 [pid 10917] <... futex resumed>) = ? [pid 10916] <... exit_group resumed>) = ? [pid 10917] +++ exited with 0 +++ [pid 10918] +++ exited with 0 +++ [pid 10916] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10916, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5052] umount2("./1304", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1304/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1304/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1304/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1304/bus") = 0 [pid 5052] umount2("./1304/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1304/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1304/binderfs") = 0 [pid 5052] umount2("./1304/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1304/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1304/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1304/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1304") = 0 [pid 5052] mkdir("./1305", 0777) = 0 [ 283.864157][T10917] loop0: detected capacity change from 0 to 512 [ 283.870954][T10918] I/O error, dev loop0, sector 248 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 283.877709][T10917] ext4: Unknown parameter 'nouser_xattr' [ 283.882535][T10918] Buffer I/O error on dev loop0, logical block 31, lost async page write [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10919 attached , child_tidptr=0x555556d60690) = 10919 [pid 10919] set_robust_list(0x555556d606a0, 24) = 0 [pid 10919] chdir("./1305") = 0 [pid 10919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10919] setpgid(0, 0) = 0 [pid 10919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10919] write(3, "1000", 4) = 4 [pid 10919] close(3) = 0 [pid 10919] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10919] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10919] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10919] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10919] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10919] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10919] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10920 attached => {parent_tid=[10920]}, 88) = 10920 [pid 10919] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10919] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10919] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10919] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10919] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10919] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10920] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10919] <... clone3 resumed> => {parent_tid=[10921]}, 88) = 10921 ./strace-static-x86_64: Process 10921 attached [pid 10920] <... rseq resumed>) = 0 [pid 10919] rt_sigprocmask(SIG_SETMASK, [], [pid 10921] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10920] set_robust_list(0x7f55300e29a0, 24 [pid 10921] <... rseq resumed>) = 0 [pid 10920] <... set_robust_list resumed>) = 0 [pid 10921] set_robust_list(0x7f55300c19a0, 24 [pid 10920] rt_sigprocmask(SIG_SETMASK, [], [pid 10921] <... set_robust_list resumed>) = 0 [pid 10920] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10921] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10920] memfd_create("syzkaller", 0 [pid 10919] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10921] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10920] <... memfd_create resumed>) = 3 [pid 10920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10919] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10921] <... futex resumed>) = 0 [pid 10920] <... mmap resumed>) = 0x7f5527ca1000 [pid 10919] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10921] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10921] <... open resumed>) = 4 [pid 10921] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10921] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10919] <... futex resumed>) = 0 [pid 10919] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10921] <... futex resumed>) = 0 [pid 10919] <... futex resumed>) = 1 [pid 10921] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10919] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10921] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10920] <... write resumed>) = 262144 [pid 10919] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10921] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10919] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10921] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10919] <... futex resumed>) = 0 [pid 10921] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10920] munmap(0x7f5527ca1000, 262144 [pid 10921] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10920] <... munmap resumed>) = 0 [pid 10919] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10921] <... futex resumed>) = 0 [pid 10919] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10921] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10920] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10920] ioctl(6, LOOP_SET_FD, 3 [pid 10919] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10921] <... futex resumed>) = 0 [pid 10919] <... futex resumed>) = 1 [pid 10921] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10919] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10921] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10919] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10921] <... futex resumed>) = 0 [pid 10921] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10920] <... ioctl resumed>) = 0 [pid 10920] close(3) = 0 [pid 10920] mkdir("./file1", 0777) = 0 [pid 10920] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10920] ioctl(6, LOOP_CLR_FD) = 0 [pid 10920] close(6) = 0 [pid 10920] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10920] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10919] exit_group(0) = ? [pid 10921] <... futex resumed>) = ? [pid 10920] <... futex resumed>) = ? [pid 10921] +++ exited with 0 +++ [pid 10920] +++ exited with 0 +++ [pid 10919] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10919, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1305", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1305/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1305/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1305/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1305/bus") = 0 [pid 5052] umount2("./1305/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1305/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1305/binderfs") = 0 [pid 5052] umount2("./1305/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1305/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1305/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [ 283.996597][T10920] loop0: detected capacity change from 0 to 512 [ 284.008178][T10920] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1305/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1305") = 0 [pid 5052] mkdir("./1306", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10922 attached , child_tidptr=0x555556d60690) = 10922 [pid 10922] set_robust_list(0x555556d606a0, 24) = 0 [pid 10922] chdir("./1306") = 0 [pid 10922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10922] setpgid(0, 0) = 0 [pid 10922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10922] write(3, "1000", 4) = 4 [pid 10922] close(3) = 0 [pid 10922] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10922] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10922] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10922] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10922] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10922] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10922] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10922] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10923 attached [pid 10923] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10922] <... clone3 resumed> => {parent_tid=[10923]}, 88) = 10923 [pid 10923] <... rseq resumed>) = 0 [pid 10922] rt_sigprocmask(SIG_SETMASK, [], [pid 10923] set_robust_list(0x7f55300e29a0, 24 [pid 10922] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10923] <... set_robust_list resumed>) = 0 [pid 10923] rt_sigprocmask(SIG_SETMASK, [], [pid 10922] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10923] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10922] <... futex resumed>) = 0 [pid 10923] memfd_create("syzkaller", 0) = 3 [pid 10922] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10922] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10923] <... mmap resumed>) = 0x7f5527cc2000 [pid 10922] <... mmap resumed>) = 0x7f5527ca1000 [pid 10922] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10922] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10922] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10924 attached => {parent_tid=[10924]}, 88) = 10924 [pid 10924] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053) = 0 [pid 10922] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10922] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10922] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10924] set_robust_list(0x7f5527cc19a0, 24) = 0 [pid 10924] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10924] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10923] <... write resumed>) = 262144 [pid 10924] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10922] <... futex resumed>) = 0 [pid 10922] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10924] <... futex resumed>) = 1 [pid 10922] <... futex resumed>) = 0 [pid 10924] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10922] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10924] <... mount resumed>) = 0 [pid 10923] munmap(0x7f5527cc2000, 262144 [pid 10924] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10922] <... futex resumed>) = 0 [pid 10924] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10922] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10924] <... open resumed>) = 5 [pid 10922] <... futex resumed>) = 0 [pid 10922] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10923] <... munmap resumed>) = 0 [pid 10924] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10922] <... futex resumed>) = 0 [pid 10924] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10922] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10924] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10922] <... futex resumed>) = 0 [pid 10924] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10922] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10924] <... futex resumed>) = 0 [pid 10922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10924] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10923] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10923] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10923] close(3) = 0 [pid 10923] mkdir("./file1", 0777) = 0 [pid 10923] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10923] ioctl(6, LOOP_CLR_FD) = 0 [pid 10923] close(6) = 0 [pid 10923] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10923] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10922] exit_group(0 [pid 10923] <... futex resumed>) = ? [pid 10922] <... exit_group resumed>) = ? [pid 10923] +++ exited with 0 +++ [pid 10924] <... futex resumed>) = ? [pid 10924] +++ exited with 0 +++ [pid 10922] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10922, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1306", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1306/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1306/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1306/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1306/bus") = 0 [pid 5052] umount2("./1306/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1306/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1306/binderfs") = 0 [pid 5052] umount2("./1306/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1306/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1306/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1306/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1306") = 0 [pid 5052] mkdir("./1307", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 284.105352][T10923] loop0: detected capacity change from 0 to 512 [ 284.114129][T10923] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10925 attached , child_tidptr=0x555556d60690) = 10925 [pid 10925] set_robust_list(0x555556d606a0, 24) = 0 [pid 10925] chdir("./1307") = 0 [pid 10925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10925] setpgid(0, 0) = 0 [pid 10925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10925] write(3, "1000", 4) = 4 [pid 10925] close(3) = 0 [pid 10925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10925] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10925] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10925] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10925] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10925] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10925] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10926 attached [pid 10926] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10925] <... clone3 resumed> => {parent_tid=[10926]}, 88) = 10926 [pid 10926] set_robust_list(0x7f55300e29a0, 24 [pid 10925] rt_sigprocmask(SIG_SETMASK, [], [pid 10926] <... set_robust_list resumed>) = 0 [pid 10926] rt_sigprocmask(SIG_SETMASK, [], [pid 10925] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10926] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10925] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10926] memfd_create("syzkaller", 0 [pid 10925] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10926] <... memfd_create resumed>) = 3 [pid 10925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10925] <... mmap resumed>) = 0x7f5527ca1000 [pid 10925] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10925] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10925] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0} => {parent_tid=[10927]}, 88) = 10927 ./strace-static-x86_64: Process 10927 attached [pid 10925] rt_sigprocmask(SIG_SETMASK, [], [pid 10927] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10925] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10927] <... rseq resumed>) = 0 [pid 10925] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10927] set_robust_list(0x7f5527cc19a0, 24) = 0 [pid 10925] <... futex resumed>) = 0 [pid 10927] rt_sigprocmask(SIG_SETMASK, [], [pid 10925] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10927] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10927] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10927] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10925] <... futex resumed>) = 0 [pid 10927] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10925] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10927] <... mount resumed>) = 0 [pid 10925] <... futex resumed>) = 0 [pid 10925] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10927] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10925] <... futex resumed>) = 0 [pid 10925] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10927] <... futex resumed>) = 1 [pid 10925] <... futex resumed>) = 0 [pid 10927] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10925] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10927] <... open resumed>) = 5 [pid 10927] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10925] <... futex resumed>) = 0 [pid 10925] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10927] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10925] <... futex resumed>) = 0 [pid 10927] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10925] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10927] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10926] <... write resumed>) = 262144 [pid 10925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10927] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10926] munmap(0x7f5527cc2000, 262144) = 0 [pid 10926] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10926] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10926] close(3) = 0 [pid 10926] mkdir("./file1", 0777) = 0 [pid 10926] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10926] ioctl(6, LOOP_CLR_FD) = 0 [pid 10926] close(6) = 0 [pid 10926] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10926] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10925] exit_group(0 [pid 10926] <... futex resumed>) = ? [pid 10925] <... exit_group resumed>) = ? [pid 10926] +++ exited with 0 +++ [pid 10927] <... futex resumed>) = ? [pid 10927] +++ exited with 0 +++ [pid 10925] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10925, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] umount2("./1307", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1307/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1307/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1307/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1307/bus") = 0 [pid 5052] umount2("./1307/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1307/binderfs") = 0 [pid 5052] umount2("./1307/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1307/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1307/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 284.216420][T10926] loop0: detected capacity change from 0 to 512 [ 284.227800][T10926] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1307/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1307") = 0 [pid 5052] mkdir("./1308", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10928 attached , child_tidptr=0x555556d60690) = 10928 [pid 10928] set_robust_list(0x555556d606a0, 24) = 0 [pid 10928] chdir("./1308") = 0 [pid 10928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10928] setpgid(0, 0) = 0 [pid 10928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10928] write(3, "1000", 4) = 4 [pid 10928] close(3) = 0 [pid 10928] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10928] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10928] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10928] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10928] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10928] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10929]}, 88) = 10929 [pid 10928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10928] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10929 attached [pid 10929] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10928] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10929] <... rseq resumed>) = 0 [pid 10928] <... futex resumed>) = 0 [pid 10929] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10928] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10928] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10928] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10929] rt_sigprocmask(SIG_SETMASK, [], [pid 10928] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10929] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10928] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10929] memfd_create("syzkaller", 0 [pid 10928] <... clone3 resumed> => {parent_tid=[10930]}, 88) = 10930 ./strace-static-x86_64: Process 10930 attached [pid 10929] <... memfd_create resumed>) = 3 [pid 10930] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10928] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10928] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10930] <... rseq resumed>) = 0 [pid 10930] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10929] <... mmap resumed>) = 0x7f5527ca1000 [pid 10930] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10930] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10930] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10928] <... futex resumed>) = 0 [pid 10930] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10928] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10928] <... futex resumed>) = 0 [pid 10928] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10930] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10930] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10928] <... futex resumed>) = 0 [pid 10930] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10928] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10930] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10928] <... futex resumed>) = 0 [pid 10930] <... open resumed>) = 5 [pid 10928] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10929] <... write resumed>) = 262144 [pid 10930] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10928] <... futex resumed>) = 0 [pid 10930] <... futex resumed>) = 1 [pid 10928] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10930] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10928] <... futex resumed>) = 0 [pid 10930] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10928] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10930] <... futex resumed>) = 0 [pid 10928] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10930] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10929] munmap(0x7f5527ca1000, 262144) = 0 [pid 10929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10929] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10929] close(3) = 0 [pid 10929] mkdir("./file1", 0777) = 0 [pid 10929] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10929] ioctl(6, LOOP_CLR_FD) = 0 [pid 10929] close(6) = 0 [pid 10929] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10929] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10928] exit_group(0 [pid 10930] <... futex resumed>) = ? [pid 10929] <... futex resumed>) = ? [pid 10928] <... exit_group resumed>) = ? [pid 10930] +++ exited with 0 +++ [pid 10929] +++ exited with 0 +++ [pid 10928] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10928, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1308", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1308/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1308/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1308/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1308/bus") = 0 [pid 5052] umount2("./1308/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1308/binderfs") = 0 [pid 5052] umount2("./1308/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1308/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1308/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1308/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1308") = 0 [pid 5052] mkdir("./1309", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10931 attached , child_tidptr=0x555556d60690) = 10931 [pid 10931] set_robust_list(0x555556d606a0, 24) = 0 [pid 10931] chdir("./1309") = 0 [pid 10931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10931] setpgid(0, 0) = 0 [pid 10931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10931] write(3, "1000", 4) = 4 [pid 10931] close(3) = 0 [pid 10931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10931] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10931] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10931] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10931] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10931] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10932 attached [pid 10932] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10931] <... clone3 resumed> => {parent_tid=[10932]}, 88) = 10932 [pid 10932] <... rseq resumed>) = 0 [pid 10931] rt_sigprocmask(SIG_SETMASK, [], [pid 10932] set_robust_list(0x7f55300e29a0, 24 [pid 10931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10932] <... set_robust_list resumed>) = 0 [pid 10931] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10932] rt_sigprocmask(SIG_SETMASK, [], [pid 10931] <... futex resumed>) = 0 [pid 10932] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10931] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10932] memfd_create("syzkaller", 0 [pid 10931] <... futex resumed>) = 0 [pid 10931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10932] <... memfd_create resumed>) = 3 [pid 10931] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10931] <... mprotect resumed>) = 0 [pid 10932] <... mmap resumed>) = 0x7f5527ca1000 [pid 10931] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10931] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10933 attached [pid 10933] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10931] <... clone3 resumed> => {parent_tid=[10933]}, 88) = 10933 [pid 10931] rt_sigprocmask(SIG_SETMASK, [], [pid 10933] <... rseq resumed>) = 0 [pid 10931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10933] set_robust_list(0x7f55300c19a0, 24 [pid 10931] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10933] <... set_robust_list resumed>) = 0 [ 284.326186][T10929] loop0: detected capacity change from 0 to 512 [ 284.336046][T10929] ext4: Unknown parameter 'nouser_xattr' [pid 10933] rt_sigprocmask(SIG_SETMASK, [], [pid 10932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10931] <... futex resumed>) = 0 [pid 10933] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10931] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10933] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10932] <... write resumed>) = 262144 [pid 10933] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10933] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10931] <... futex resumed>) = 0 [pid 10931] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10933] <... futex resumed>) = 0 [pid 10931] <... futex resumed>) = 1 [pid 10933] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10933] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10933] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10931] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10931] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10933] <... futex resumed>) = 0 [pid 10931] <... futex resumed>) = 1 [pid 10933] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10931] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10933] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10931] <... futex resumed>) = 0 [pid 10933] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10931] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10931] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10933] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10933] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10931] <... futex resumed>) = 0 [pid 10933] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10932] munmap(0x7f5527ca1000, 262144) = 0 [pid 10932] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10932] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10932] close(3) = 0 [pid 10932] mkdir("./file1", 0777) = 0 [pid 10932] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10932] ioctl(6, LOOP_CLR_FD) = 0 [pid 10932] close(6) = 0 [pid 10932] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10931] exit_group(0 [pid 10933] <... futex resumed>) = ? [pid 10931] <... exit_group resumed>) = ? [pid 10933] +++ exited with 0 +++ [pid 10932] +++ exited with 0 +++ [pid 10931] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10931, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1309", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1309/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1309/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1309/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1309/bus") = 0 [pid 5052] umount2("./1309/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1309/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1309/binderfs") = 0 [pid 5052] umount2("./1309/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1309/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1309/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [ 284.404402][T10932] loop0: detected capacity change from 0 to 512 [ 284.415215][T10932] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(4) = 0 [pid 5052] rmdir("./1309/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1309") = 0 [pid 5052] mkdir("./1310", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10934 attached , child_tidptr=0x555556d60690) = 10934 [pid 10934] set_robust_list(0x555556d606a0, 24) = 0 [pid 10934] chdir("./1310") = 0 [pid 10934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10934] setpgid(0, 0) = 0 [pid 10934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10934] write(3, "1000", 4) = 4 [pid 10934] close(3) = 0 [pid 10934] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10934] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10934] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10934] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10934] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10934] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10934] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10935 attached [pid 10935] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10934] <... clone3 resumed> => {parent_tid=[10935]}, 88) = 10935 [pid 10934] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10934] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10935] <... rseq resumed>) = 0 [pid 10934] <... futex resumed>) = 0 [pid 10935] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10935] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10934] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10935] memfd_create("syzkaller", 0 [pid 10934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10935] <... memfd_create resumed>) = 3 [pid 10935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10934] <... mmap resumed>) = 0x7f55300a1000 [pid 10934] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10934] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10934] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10936 attached [pid 10936] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10934] <... clone3 resumed> => {parent_tid=[10936]}, 88) = 10936 [pid 10935] <... mmap resumed>) = 0x7f5527ca1000 [pid 10936] set_robust_list(0x7f55300c19a0, 24 [pid 10934] rt_sigprocmask(SIG_SETMASK, [], [pid 10936] <... set_robust_list resumed>) = 0 [pid 10934] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10936] rt_sigprocmask(SIG_SETMASK, [], [pid 10934] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10936] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10934] <... futex resumed>) = 0 [pid 10936] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10934] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10936] <... open resumed>) = 4 [pid 10936] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10934] <... futex resumed>) = 0 [pid 10934] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10934] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10936] <... futex resumed>) = 1 [pid 10936] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10936] <... mount resumed>) = 0 [pid 10936] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10934] <... futex resumed>) = 0 [pid 10934] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10936] <... futex resumed>) = 1 [pid 10934] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10936] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10936] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10934] <... futex resumed>) = 0 [pid 10936] <... futex resumed>) = 1 [pid 10934] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10936] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10934] <... futex resumed>) = 0 [pid 10936] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10934] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10936] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10936] <... futex resumed>) = 0 [pid 10936] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10935] <... write resumed>) = 262144 [pid 10935] munmap(0x7f5527ca1000, 262144) = 0 [pid 10935] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10935] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10935] close(3) = 0 [pid 10935] mkdir("./file1", 0777) = 0 [pid 10935] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10935] ioctl(6, LOOP_CLR_FD) = 0 [pid 10935] close(6) = 0 [pid 10935] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10934] exit_group(0 [pid 10936] <... futex resumed>) = ? [pid 10935] <... futex resumed>) = ? [pid 10934] <... exit_group resumed>) = ? [pid 10935] +++ exited with 0 +++ [pid 10936] +++ exited with 0 +++ [pid 10934] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10934, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1310", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1310/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1310/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1310/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1310/bus") = 0 [pid 5052] umount2("./1310/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1310/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1310/binderfs") = 0 [pid 5052] umount2("./1310/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1310/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1310/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1310/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1310") = 0 [pid 5052] mkdir("./1311", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10937 attached , child_tidptr=0x555556d60690) = 10937 [pid 10937] set_robust_list(0x555556d606a0, 24) = 0 [pid 10937] chdir("./1311") = 0 [pid 10937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10937] setpgid(0, 0) = 0 [pid 10937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10937] write(3, "1000", 4) = 4 [pid 10937] close(3) = 0 [pid 10937] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10937] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10937] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10937] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10937] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10937] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10937] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10937] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10938 attached [pid 10938] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10937] <... clone3 resumed> => {parent_tid=[10938]}, 88) = 10938 [pid 10938] <... rseq resumed>) = 0 [pid 10937] rt_sigprocmask(SIG_SETMASK, [], [pid 10938] set_robust_list(0x7f55300e29a0, 24 [pid 10937] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10938] <... set_robust_list resumed>) = 0 [pid 10937] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10938] rt_sigprocmask(SIG_SETMASK, [], [pid 10937] <... futex resumed>) = 0 [pid 10938] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10937] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10938] memfd_create("syzkaller", 0 [pid 10937] <... futex resumed>) = 0 [pid 10937] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10938] <... memfd_create resumed>) = 3 [pid 10937] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [ 284.517674][T10935] loop0: detected capacity change from 0 to 512 [ 284.526954][T10935] ext4: Unknown parameter 'nouser_xattr' [pid 10937] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10937] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10937] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10939 attached => {parent_tid=[10939]}, 88) = 10939 [pid 10937] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10937] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10937] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10939] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10939] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10939] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10938] <... write resumed>) = 262144 [pid 10939] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10938] munmap(0x7f5527ca1000, 262144 [pid 10939] <... open resumed>) = 4 [pid 10939] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10938] <... munmap resumed>) = 0 [pid 10938] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10938] ioctl(5, LOOP_SET_FD, 3 [pid 10939] <... futex resumed>) = 1 [pid 10937] <... futex resumed>) = 0 [pid 10937] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10939] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10937] <... futex resumed>) = 0 [pid 10939] <... mount resumed>) = 0 [pid 10937] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10938] <... ioctl resumed>) = 0 [pid 10938] close(3) = 0 [pid 10938] mkdir("./file1", 0777) = 0 [pid 10938] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10939] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10937] <... futex resumed>) = 0 [pid 10939] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10937] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10939] <... futex resumed>) = 0 [pid 10937] <... futex resumed>) = 1 [pid 10937] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10939] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10939] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10937] <... futex resumed>) = 0 [pid 10939] <... futex resumed>) = 1 [pid 10937] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10937] <... futex resumed>) = 0 [pid 10937] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10938] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10938] ioctl(5, LOOP_CLR_FD) = 0 [pid 10938] close(5) = 0 [pid 10938] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10938] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10939] <... write resumed>) = 262144 [pid 10939] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10937] <... futex resumed>) = 0 [pid 10939] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10937] exit_group(0 [pid 10939] <... futex resumed>) = ? [pid 10937] <... exit_group resumed>) = ? [pid 10938] <... futex resumed>) = ? [pid 10939] +++ exited with 0 +++ [pid 10938] +++ exited with 0 +++ [pid 10937] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10937, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1311", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1311/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1311/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1311/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1311/bus") = 0 [pid 5052] umount2("./1311/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1311/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1311/binderfs") = 0 [pid 5052] umount2("./1311/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1311/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1311/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 284.593355][T10938] loop0: detected capacity change from 0 to 512 [ 284.603459][T10938] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "./1311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1311/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1311") = 0 [pid 5052] mkdir("./1312", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10940 attached , child_tidptr=0x555556d60690) = 10940 [pid 10940] set_robust_list(0x555556d606a0, 24) = 0 [pid 10940] chdir("./1312") = 0 [pid 10940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10940] setpgid(0, 0) = 0 [pid 10940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10940] write(3, "1000", 4) = 4 [pid 10940] close(3) = 0 [pid 10940] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10940] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10940] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10940] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10940] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10940] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10940] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10941 attached [pid 10941] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10940] <... clone3 resumed> => {parent_tid=[10941]}, 88) = 10941 [pid 10941] <... rseq resumed>) = 0 [pid 10940] rt_sigprocmask(SIG_SETMASK, [], [pid 10941] set_robust_list(0x7f55300e29a0, 24 [pid 10940] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10941] <... set_robust_list resumed>) = 0 [pid 10940] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10941] rt_sigprocmask(SIG_SETMASK, [], [pid 10940] <... futex resumed>) = 0 [pid 10941] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10940] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10941] memfd_create("syzkaller", 0 [pid 10940] <... futex resumed>) = 0 [pid 10940] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10941] <... memfd_create resumed>) = 3 [pid 10940] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10940] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10940] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10940] <... clone3 resumed> => {parent_tid=[10942]}, 88) = 10942 [pid 10940] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10942 attached NULL, 8) = 0 [pid 10940] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10942] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10940] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10942] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10942] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10942] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10942] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10940] <... futex resumed>) = 0 [pid 10942] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10940] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10940] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10941] <... write resumed>) = 262144 [pid 10942] <... futex resumed>) = 0 [pid 10941] munmap(0x7f5527ca1000, 262144 [pid 10942] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10941] <... munmap resumed>) = 0 [pid 10942] <... mount resumed>) = 0 [pid 10941] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10942] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10941] <... openat resumed>) = 5 [pid 10942] <... futex resumed>) = 1 [pid 10942] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10941] ioctl(5, LOOP_SET_FD, 3 [pid 10940] <... futex resumed>) = 0 [pid 10940] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10940] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10942] <... futex resumed>) = 0 [pid 10942] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10942] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10940] <... futex resumed>) = 0 [pid 10942] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10940] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10941] <... ioctl resumed>) = 0 [pid 10940] <... futex resumed>) = 0 [pid 10942] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10940] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10941] close(3) = 0 [pid 10941] mkdir("./file1", 0777) = 0 [pid 10941] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10941] ioctl(5, LOOP_CLR_FD) = 0 [pid 10941] close(5) = 0 [pid 10941] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10941] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10942] <... write resumed>) = 262144 [pid 10942] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10940] <... futex resumed>) = 0 [pid 10942] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10940] exit_group(0 [pid 10942] <... futex resumed>) = ? [pid 10941] <... futex resumed>) = ? [pid 10941] +++ exited with 0 +++ [pid 10942] +++ exited with 0 +++ [pid 10940] <... exit_group resumed>) = ? [pid 10940] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10940, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1312", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1312/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1312/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1312/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1312/bus") = 0 [pid 5052] umount2("./1312/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 284.716800][T10941] loop0: detected capacity change from 0 to 512 [ 284.728672][T10941] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1312/binderfs") = 0 [pid 5052] umount2("./1312/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1312/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1312/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1312/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1312") = 0 [pid 5052] mkdir("./1313", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10943 attached , child_tidptr=0x555556d60690) = 10943 [pid 10943] set_robust_list(0x555556d606a0, 24) = 0 [pid 10943] chdir("./1313") = 0 [pid 10943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10943] setpgid(0, 0) = 0 [pid 10943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10943] write(3, "1000", 4) = 4 [pid 10943] close(3) = 0 [pid 10943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10943] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10943] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10943] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10943] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10943] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10943] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10944 attached => {parent_tid=[10944]}, 88) = 10944 [pid 10943] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10944] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10944] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10943] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10944] rt_sigprocmask(SIG_SETMASK, [], [pid 10943] <... futex resumed>) = 0 [pid 10944] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10943] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10944] memfd_create("syzkaller", 0 [pid 10943] <... mmap resumed>) = 0x7f55300a1000 [pid 10943] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10943] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10943] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10944] <... memfd_create resumed>) = 3 [pid 10944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 10945 attached [pid 10945] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10944] <... mmap resumed>) = 0x7f5527ca1000 [pid 10943] <... clone3 resumed> => {parent_tid=[10945]}, 88) = 10945 [pid 10945] set_robust_list(0x7f55300c19a0, 24 [pid 10943] rt_sigprocmask(SIG_SETMASK, [], [pid 10945] <... set_robust_list resumed>) = 0 [pid 10943] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10945] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10943] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10943] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10945] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10945] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10943] <... futex resumed>) = 0 [pid 10945] <... futex resumed>) = 1 [pid 10943] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10945] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10943] <... futex resumed>) = 0 [pid 10945] <... mount resumed>) = 0 [pid 10944] <... write resumed>) = 262144 [pid 10943] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10944] munmap(0x7f5527ca1000, 262144 [pid 10945] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10943] <... futex resumed>) = 0 [pid 10943] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10945] <... futex resumed>) = 1 [pid 10944] <... munmap resumed>) = 0 [pid 10943] <... futex resumed>) = 0 [pid 10945] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10943] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10944] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10945] <... open resumed>) = 5 [pid 10944] <... openat resumed>) = 6 [pid 10945] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10944] ioctl(6, LOOP_SET_FD, 3 [pid 10945] <... futex resumed>) = 1 [pid 10943] <... futex resumed>) = 0 [pid 10945] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10943] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10945] <... futex resumed>) = 0 [pid 10943] <... futex resumed>) = 1 [pid 10945] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10943] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10944] <... ioctl resumed>) = 0 [pid 10944] close(3) = 0 [pid 10944] mkdir("./file1", 0777) = 0 [pid 10944] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10945] <... write resumed>) = 262144 [pid 10945] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10943] <... futex resumed>) = 0 [pid 10945] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10944] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10944] ioctl(6, LOOP_CLR_FD) = 0 [pid 10944] close(6) = 0 [pid 10944] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10943] exit_group(0 [pid 10945] <... futex resumed>) = ? [pid 10943] <... exit_group resumed>) = ? [pid 10945] +++ exited with 0 +++ [pid 10944] +++ exited with 0 +++ [pid 10943] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10943, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1313", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1313/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1313/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1313/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1313/bus") = 0 [pid 5052] umount2("./1313/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1313/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1313/binderfs") = 0 [pid 5052] umount2("./1313/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1313/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1313/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1313/file1") = 0 [ 284.839183][T10944] loop0: detected capacity change from 0 to 512 [ 284.852073][T10944] ext4: Unknown parameter 'nouser_xattr' [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1313") = 0 [pid 5052] mkdir("./1314", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10946 attached , child_tidptr=0x555556d60690) = 10946 [pid 10946] set_robust_list(0x555556d606a0, 24) = 0 [pid 10946] chdir("./1314") = 0 [pid 10946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10946] setpgid(0, 0) = 0 [pid 10946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10946] write(3, "1000", 4) = 4 [pid 10946] close(3) = 0 [pid 10946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10946] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10946] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10946] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10946] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10946] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10946] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10947 attached => {parent_tid=[10947]}, 88) = 10947 [pid 10946] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10947] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10947] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10947] rt_sigprocmask(SIG_SETMASK, [], [pid 10946] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10946] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10946] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10946] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10946] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10948 attached [pid 10948] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10948] set_robust_list(0x7f55300c19a0, 24 [pid 10946] <... clone3 resumed> => {parent_tid=[10948]}, 88) = 10948 [pid 10948] <... set_robust_list resumed>) = 0 [pid 10946] rt_sigprocmask(SIG_SETMASK, [], [pid 10948] rt_sigprocmask(SIG_SETMASK, [], [pid 10946] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10948] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10946] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10948] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10946] <... futex resumed>) = 0 [pid 10946] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10948] <... open resumed>) = 3 [pid 10947] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10948] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10947] memfd_create("syzkaller", 0 [pid 10948] <... futex resumed>) = 1 [pid 10946] <... futex resumed>) = 0 [pid 10948] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10947] <... memfd_create resumed>) = 4 [pid 10946] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10948] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10947] <... mmap resumed>) = 0x7f5527ca1000 [pid 10946] <... futex resumed>) = 0 [pid 10946] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10948] <... mount resumed>) = 0 [pid 10948] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10946] <... futex resumed>) = 0 [pid 10946] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10948] <... futex resumed>) = 1 [pid 10947] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10946] <... futex resumed>) = 0 [pid 10948] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10946] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10948] <... open resumed>) = 5 [pid 10948] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10946] <... futex resumed>) = 0 [pid 10946] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10948] <... futex resumed>) = 1 [pid 10946] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10948] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10948] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10946] <... futex resumed>) = 0 [pid 10948] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10947] <... write resumed>) = 262144 [pid 10947] munmap(0x7f5527ca1000, 262144) = 0 [pid 10947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10947] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10947] close(4) = 0 [pid 10947] mkdir("./file1", 0777) = 0 [pid 10947] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10947] ioctl(6, LOOP_CLR_FD) = 0 [pid 10947] close(6) = 0 [pid 10947] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10947] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10946] exit_group(0 [pid 10948] <... futex resumed>) = ? [pid 10946] <... exit_group resumed>) = ? [pid 10947] <... futex resumed>) = ? [pid 10948] +++ exited with 0 +++ [pid 10947] +++ exited with 0 +++ [pid 10946] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10946, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1314", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1314/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1314/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1314/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1314/bus") = 0 [pid 5052] umount2("./1314/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1314/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1314/binderfs") = 0 [pid 5052] umount2("./1314/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1314/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1314/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [ 284.948889][T10947] loop0: detected capacity change from 0 to 512 [ 284.958075][T10947] ext4: Unknown parameter 'nouser_xattr' [pid 5052] rmdir("./1314/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1314") = 0 [pid 5052] mkdir("./1315", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10949 ./strace-static-x86_64: Process 10949 attached [pid 10949] set_robust_list(0x555556d606a0, 24) = 0 [pid 10949] chdir("./1315") = 0 [pid 10949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10949] setpgid(0, 0) = 0 [pid 10949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10949] write(3, "1000", 4) = 4 [pid 10949] close(3) = 0 [pid 10949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10949] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10949] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10949] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10949] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10949] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10950 attached => {parent_tid=[10950]}, 88) = 10950 [pid 10949] rt_sigprocmask(SIG_SETMASK, [], [pid 10950] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10949] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10949] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10949] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10950] <... rseq resumed>) = 0 [pid 10949] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10950] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10950] rt_sigprocmask(SIG_SETMASK, [], [pid 10949] <... mprotect resumed>) = 0 [pid 10950] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10949] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10950] memfd_create("syzkaller", 0 [pid 10949] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10951 attached [pid 10950] <... memfd_create resumed>) = 3 [pid 10949] <... clone3 resumed> => {parent_tid=[10951]}, 88) = 10951 [pid 10949] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10949] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10949] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10951] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10951] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10951] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10951] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10951] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10949] <... futex resumed>) = 0 [pid 10951] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10949] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10951] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10949] <... futex resumed>) = 0 [pid 10951] <... mount resumed>) = 0 [pid 10949] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10950] <... mmap resumed>) = 0x7f5527ca1000 [pid 10951] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10949] <... futex resumed>) = 0 [pid 10949] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10951] <... futex resumed>) = 1 [pid 10951] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10949] <... futex resumed>) = 0 [pid 10951] <... open resumed>) = 5 [pid 10949] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10951] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10949] <... futex resumed>) = 0 [pid 10949] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10951] <... futex resumed>) = 1 [pid 10949] <... futex resumed>) = 0 [pid 10951] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10949] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10951] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10951] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10951] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10949] <... futex resumed>) = 0 [pid 10950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10950] munmap(0x7f5527ca1000, 262144) = 0 [pid 10950] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10950] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10950] close(3) = 0 [pid 10950] mkdir("./file1", 0777) = 0 [pid 10950] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10950] ioctl(6, LOOP_CLR_FD) = 0 [pid 10950] close(6) = 0 [pid 10950] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10950] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10949] exit_group(0) = ? [pid 10950] <... futex resumed>) = ? [pid 10951] <... futex resumed>) = ? [pid 10950] +++ exited with 0 +++ [pid 10951] +++ exited with 0 +++ [pid 10949] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10949, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5052] umount2("./1315", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1315/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1315/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1315/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1315/bus") = 0 [pid 5052] umount2("./1315/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1315/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1315/binderfs") = 0 [pid 5052] umount2("./1315/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1315/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1315/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1315/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [ 285.052378][T10950] loop0: detected capacity change from 0 to 512 [ 285.061277][T10950] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(3) = 0 [pid 5052] rmdir("./1315") = 0 [pid 5052] mkdir("./1316", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10952 attached , child_tidptr=0x555556d60690) = 10952 [pid 10952] set_robust_list(0x555556d606a0, 24) = 0 [pid 10952] chdir("./1316") = 0 [pid 10952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10952] setpgid(0, 0) = 0 [pid 10952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10952] write(3, "1000", 4) = 4 [pid 10952] close(3) = 0 [pid 10952] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10952] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10952] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10952] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10952] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10952] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10952] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10953]}, 88) = 10953 ./strace-static-x86_64: Process 10953 attached [pid 10953] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10952] rt_sigprocmask(SIG_SETMASK, [], [pid 10953] <... rseq resumed>) = 0 [pid 10952] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10952] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10953] set_robust_list(0x7f55300e29a0, 24 [pid 10952] <... futex resumed>) = 0 [pid 10952] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10952] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10952] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10952] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10954 attached [pid 10954] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10952] <... clone3 resumed> => {parent_tid=[10954]}, 88) = 10954 [pid 10954] <... rseq resumed>) = 0 [pid 10952] rt_sigprocmask(SIG_SETMASK, [], [pid 10954] set_robust_list(0x7f55300c19a0, 24 [pid 10952] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10954] <... set_robust_list resumed>) = 0 [pid 10952] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10954] rt_sigprocmask(SIG_SETMASK, [], [pid 10952] <... futex resumed>) = 0 [pid 10954] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10952] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10954] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10953] <... set_robust_list resumed>) = 0 [pid 10953] rt_sigprocmask(SIG_SETMASK, [], [pid 10954] <... open resumed>) = 3 [pid 10953] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10953] memfd_create("syzkaller", 0 [pid 10954] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10953] <... memfd_create resumed>) = 4 [pid 10952] <... futex resumed>) = 0 [pid 10953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10952] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10954] <... futex resumed>) = 1 [pid 10952] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10953] <... mmap resumed>) = 0x7f5527ca1000 [pid 10954] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10954] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10952] <... futex resumed>) = 0 [pid 10952] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10954] <... futex resumed>) = 1 [pid 10952] <... futex resumed>) = 0 [pid 10954] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 10952] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10953] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10954] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10952] <... futex resumed>) = 0 [pid 10954] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10952] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10952] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10954] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10954] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10952] <... futex resumed>) = 0 [pid 10954] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10953] <... write resumed>) = 262144 [pid 10953] munmap(0x7f5527ca1000, 262144) = 0 [pid 10953] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10953] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10953] close(4) = 0 [pid 10953] mkdir("./file1", 0777) = 0 [pid 10953] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10953] ioctl(6, LOOP_CLR_FD) = 0 [pid 10953] close(6) = 0 [pid 10953] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10953] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10952] exit_group(0 [pid 10954] <... futex resumed>) = ? [pid 10953] <... futex resumed>) = ? [pid 10952] <... exit_group resumed>) = ? [pid 10953] +++ exited with 0 +++ [pid 10954] +++ exited with 0 +++ [pid 10952] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10952, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] umount2("./1316", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1316/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1316/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1316/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1316/bus") = 0 [pid 5052] umount2("./1316/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1316/binderfs") = 0 [pid 5052] umount2("./1316/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1316/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1316/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1316/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1316") = 0 [pid 5052] mkdir("./1317", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [ 285.164411][T10953] loop0: detected capacity change from 0 to 512 [ 285.173993][T10953] ext4: Unknown parameter 'nouser_xattr' [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10955 ./strace-static-x86_64: Process 10955 attached [pid 10955] set_robust_list(0x555556d606a0, 24) = 0 [pid 10955] chdir("./1317") = 0 [pid 10955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10955] setpgid(0, 0) = 0 [pid 10955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10955] write(3, "1000", 4) = 4 [pid 10955] close(3) = 0 [pid 10955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10955] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10955] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10955] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10955] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10955] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10955] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10955] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10956 attached [pid 10956] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10955] <... clone3 resumed> => {parent_tid=[10956]}, 88) = 10956 [pid 10956] <... rseq resumed>) = 0 [pid 10956] set_robust_list(0x7f55300e29a0, 24 [pid 10955] rt_sigprocmask(SIG_SETMASK, [], [pid 10956] <... set_robust_list resumed>) = 0 [pid 10955] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10956] rt_sigprocmask(SIG_SETMASK, [], [pid 10955] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10956] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10955] <... futex resumed>) = 0 [pid 10955] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10956] memfd_create("syzkaller", 0 [pid 10955] <... futex resumed>) = 0 [pid 10955] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10956] <... memfd_create resumed>) = 3 [pid 10956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10955] <... mmap resumed>) = 0x7f55300a1000 [pid 10955] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10955] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10955] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10955] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10957 attached => {parent_tid=[10957]}, 88) = 10957 [pid 10957] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10957] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10957] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10957] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10955] rt_sigprocmask(SIG_SETMASK, [], [pid 10956] <... write resumed>) = 262144 [pid 10955] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10956] munmap(0x7f5527ca1000, 262144 [pid 10955] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10957] <... futex resumed>) = 0 [pid 10955] <... futex resumed>) = 1 [pid 10957] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10956] <... munmap resumed>) = 0 [pid 10955] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10957] <... open resumed>) = 4 [pid 10956] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10956] ioctl(5, LOOP_SET_FD, 3 [pid 10957] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10955] <... futex resumed>) = 0 [pid 10957] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10956] <... ioctl resumed>) = 0 [pid 10956] close(3) = 0 [pid 10956] mkdir("./file1", 0777 [pid 10955] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10957] <... futex resumed>) = 0 [pid 10955] <... futex resumed>) = 1 [pid 10957] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10955] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10957] <... mount resumed>) = 0 [pid 10957] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10955] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10957] <... futex resumed>) = 0 [pid 10955] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10957] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10955] <... futex resumed>) = 0 [pid 10957] <... open resumed>) = 3 [pid 10957] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10957] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10955] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 10955] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10957] <... futex resumed>) = 0 [pid 10955] <... futex resumed>) = 1 [pid 10957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10955] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10956] <... mkdir resumed>) = 0 [pid 10956] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10956] ioctl(5, LOOP_CLR_FD) = 0 [pid 10956] close(5) = 0 [pid 10956] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10956] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10957] <... write resumed>) = 262144 [pid 10957] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10957] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10955] <... futex resumed>) = 0 [pid 10955] exit_group(0 [pid 10956] <... futex resumed>) = ? [pid 10955] <... exit_group resumed>) = ? [pid 10956] +++ exited with 0 +++ [pid 10957] <... futex resumed>) = ? [pid 10957] +++ exited with 0 +++ [pid 10955] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10955, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1317", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1317/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1317/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 285.268056][T10956] loop0: detected capacity change from 0 to 512 [ 285.281324][T10956] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1317/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1317/bus") = 0 [pid 5052] umount2("./1317/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1317/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1317/binderfs") = 0 [pid 5052] umount2("./1317/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1317/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1317/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1317/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1317") = 0 [pid 5052] mkdir("./1318", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10958 attached , child_tidptr=0x555556d60690) = 10958 [pid 10958] set_robust_list(0x555556d606a0, 24) = 0 [pid 10958] chdir("./1318") = 0 [pid 10958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10958] setpgid(0, 0) = 0 [pid 10958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10958] write(3, "1000", 4) = 4 [pid 10958] close(3) = 0 [pid 10958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10958] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10958] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10958] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10958] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10958] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10959 attached [pid 10959] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10958] <... clone3 resumed> => {parent_tid=[10959]}, 88) = 10959 [pid 10959] <... rseq resumed>) = 0 [pid 10958] rt_sigprocmask(SIG_SETMASK, [], [pid 10959] set_robust_list(0x7f55300e29a0, 24 [pid 10958] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10959] <... set_robust_list resumed>) = 0 [pid 10958] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10959] rt_sigprocmask(SIG_SETMASK, [], [pid 10958] <... futex resumed>) = 0 [pid 10959] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10958] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10959] memfd_create("syzkaller", 0 [pid 10958] <... futex resumed>) = 0 [pid 10958] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10959] <... memfd_create resumed>) = 3 [pid 10959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10958] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10959] <... mmap resumed>) = 0x7f5527ca1000 [pid 10958] <... mprotect resumed>) = 0 [pid 10958] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10958] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10960 attached => {parent_tid=[10960]}, 88) = 10960 [pid 10958] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10960] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10958] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10960] <... rseq resumed>) = 0 [pid 10958] <... futex resumed>) = 0 [pid 10960] set_robust_list(0x7f55300c19a0, 24 [pid 10958] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10960] <... set_robust_list resumed>) = 0 [pid 10960] rt_sigprocmask(SIG_SETMASK, [], [pid 10959] <... write resumed>) = 262144 [pid 10960] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10960] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10959] munmap(0x7f5527ca1000, 262144 [pid 10960] <... open resumed>) = 4 [pid 10960] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10959] <... munmap resumed>) = 0 [pid 10958] <... futex resumed>) = 0 [pid 10960] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10959] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10958] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10959] <... openat resumed>) = 5 [pid 10958] <... futex resumed>) = 0 [pid 10959] ioctl(5, LOOP_SET_FD, 3 [pid 10958] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10960] <... mount resumed>) = 0 [pid 10960] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10960] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10958] <... futex resumed>) = 0 [pid 10958] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10960] <... futex resumed>) = 0 [pid 10960] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10958] <... futex resumed>) = 1 [pid 10958] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10960] <... open resumed>) = 6 [pid 10960] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10958] <... futex resumed>) = 0 [pid 10960] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10958] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10960] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10958] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10960] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10959] <... ioctl resumed>) = 0 [pid 10959] close(3) = 0 [pid 10959] mkdir("./file1", 0777) = 0 [pid 10959] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10960] <... write resumed>) = 262144 [pid 10960] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10959] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10960] <... futex resumed>) = 1 [pid 10959] ioctl(5, LOOP_CLR_FD [pid 10958] <... futex resumed>) = 0 [pid 10960] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10959] <... ioctl resumed>) = 0 [pid 10959] close(5) = 0 [pid 10959] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10959] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10958] exit_group(0 [pid 10960] <... futex resumed>) = ? [pid 10960] +++ exited with 0 +++ [pid 10959] <... futex resumed>) = ? [pid 10958] <... exit_group resumed>) = ? [pid 10959] +++ exited with 0 +++ [pid 10958] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10958, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1318", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1318/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1318/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1318/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1318/bus") = 0 [pid 5052] umount2("./1318/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1318/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1318/binderfs") = 0 [pid 5052] umount2("./1318/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1318/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1318/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1318/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1318") = 0 [pid 5052] mkdir("./1319", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10961 attached , child_tidptr=0x555556d60690) = 10961 [pid 10961] set_robust_list(0x555556d606a0, 24) = 0 [pid 10961] chdir("./1319") = 0 [pid 10961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10961] setpgid(0, 0) = 0 [pid 10961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10961] write(3, "1000", 4) = 4 [pid 10961] close(3) = 0 [pid 10961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10961] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10961] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10961] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10961] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [ 285.386457][T10959] loop0: detected capacity change from 0 to 512 [ 285.398623][T10959] ext4: Unknown parameter 'nouser_xattr' [pid 10961] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10962 attached [pid 10962] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10961] <... clone3 resumed> => {parent_tid=[10962]}, 88) = 10962 [pid 10962] <... rseq resumed>) = 0 [pid 10962] set_robust_list(0x7f55300e29a0, 24 [pid 10961] rt_sigprocmask(SIG_SETMASK, [], [pid 10962] <... set_robust_list resumed>) = 0 [pid 10961] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10962] rt_sigprocmask(SIG_SETMASK, [], [pid 10961] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10962] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10961] <... futex resumed>) = 0 [pid 10962] memfd_create("syzkaller", 0 [pid 10961] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10962] <... memfd_create resumed>) = 3 [pid 10961] <... mmap resumed>) = 0x7f55300a1000 [pid 10962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10961] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10962] <... mmap resumed>) = 0x7f5527ca1000 [pid 10962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10961] <... mprotect resumed>) = 0 [pid 10961] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10961] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10963 attached [pid 10963] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10963] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10963] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10963] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10962] <... write resumed>) = 262144 [pid 10961] <... clone3 resumed> => {parent_tid=[10963]}, 88) = 10963 [pid 10961] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10961] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10961] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10962] munmap(0x7f5527ca1000, 262144 [pid 10963] <... futex resumed>) = 0 [pid 10963] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10962] <... munmap resumed>) = 0 [pid 10963] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10961] <... futex resumed>) = 0 [pid 10963] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 10961] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10963] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10961] <... futex resumed>) = 0 [pid 10961] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10962] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10963] <... mount resumed>) = 0 [pid 10963] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10961] <... futex resumed>) = 0 [pid 10963] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10961] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10963] <... futex resumed>) = 0 [pid 10961] <... futex resumed>) = 1 [pid 10963] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10961] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10963] <... open resumed>) = 5 [pid 10963] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10961] <... futex resumed>) = 0 [pid 10963] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10961] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10963] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10961] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10963] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10962] <... openat resumed>) = 6 [pid 10962] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10962] close(3) = 0 [pid 10962] mkdir("./file1", 0777) = 0 [pid 10962] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10962] ioctl(6, LOOP_CLR_FD) = 0 [pid 10962] close(6 [pid 10963] <... write resumed>) = 262144 [pid 10963] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10961] <... futex resumed>) = 0 [pid 10963] <... futex resumed>) = 1 [pid 10963] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10962] <... close resumed>) = 0 [pid 10962] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10961] exit_group(0 [pid 10962] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10963] <... futex resumed>) = ? [pid 10962] <... futex resumed>) = ? [pid 10961] <... exit_group resumed>) = ? [pid 10963] +++ exited with 0 +++ [pid 10962] +++ exited with 0 +++ [pid 10961] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10961, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1319", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1319/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1319/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1319/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1319/bus") = 0 [pid 5052] umount2("./1319/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1319/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1319/binderfs") = 0 [pid 5052] umount2("./1319/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1319/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1319/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1319/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1319") = 0 [pid 5052] mkdir("./1320", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10964 attached , child_tidptr=0x555556d60690) = 10964 [pid 10964] set_robust_list(0x555556d606a0, 24) = 0 [pid 10964] chdir("./1320") = 0 [pid 10964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10964] setpgid(0, 0) = 0 [pid 10964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10964] write(3, "1000", 4) = 4 [pid 10964] close(3) = 0 [pid 10964] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10964] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10964] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10964] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10964] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10964] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10964] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10965 attached [pid 10965] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10964] <... clone3 resumed> => {parent_tid=[10965]}, 88) = 10965 [pid 10965] <... rseq resumed>) = 0 [pid 10964] rt_sigprocmask(SIG_SETMASK, [], [pid 10965] set_robust_list(0x7f55300e29a0, 24 [pid 10964] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10965] <... set_robust_list resumed>) = 0 [pid 10964] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10965] rt_sigprocmask(SIG_SETMASK, [], [pid 10964] <... futex resumed>) = 0 [pid 10965] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10964] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10965] memfd_create("syzkaller", 0 [pid 10964] <... futex resumed>) = 0 [pid 10964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10965] <... memfd_create resumed>) = 3 [pid 10965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10964] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10965] <... mmap resumed>) = 0x7f5527ca1000 [pid 10964] <... mprotect resumed>) = 0 [ 285.469809][T10962] loop0: detected capacity change from 0 to 512 [ 285.479695][T10962] ext4: Unknown parameter 'nouser_xattr' [pid 10965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10964] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10964] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10966]}, 88) = 10966 [pid 10964] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10964] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 10966 attached [pid 10966] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10964] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10966] <... rseq resumed>) = 0 [pid 10966] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10966] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10966] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10965] <... write resumed>) = 262144 [pid 10965] munmap(0x7f5527ca1000, 262144 [pid 10966] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10964] <... futex resumed>) = 0 [pid 10966] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10964] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10964] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10965] <... munmap resumed>) = 0 [pid 10965] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10965] ioctl(5, LOOP_SET_FD, 3 [pid 10966] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10966] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10966] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10964] <... futex resumed>) = 0 [pid 10965] <... ioctl resumed>) = 0 [pid 10964] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10965] close(3 [pid 10964] <... futex resumed>) = 1 [pid 10966] <... futex resumed>) = 0 [pid 10966] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10965] <... close resumed>) = 0 [pid 10966] <... open resumed>) = 3 [pid 10964] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10965] mkdir("./file1", 0777 [pid 10966] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10964] <... futex resumed>) = 0 [pid 10964] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10966] <... futex resumed>) = 1 [pid 10964] <... futex resumed>) = 0 [pid 10966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10965] <... mkdir resumed>) = 0 [pid 10964] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10965] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10965] ioctl(5, LOOP_CLR_FD [pid 10966] <... write resumed>) = 262144 [pid 10966] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10966] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10964] <... futex resumed>) = 0 [pid 10965] <... ioctl resumed>) = 0 [pid 10965] close(5) = 0 [pid 10965] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10964] exit_group(0 [pid 10965] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10966] <... futex resumed>) = ? [pid 10966] +++ exited with 0 +++ [pid 10964] <... exit_group resumed>) = ? [pid 10965] <... futex resumed>) = ? [pid 10965] +++ exited with 0 +++ [pid 10964] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10964, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1320", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1320/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1320/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1320/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1320/bus") = 0 [pid 5052] umount2("./1320/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1320/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1320/binderfs") = 0 [pid 5052] umount2("./1320/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1320/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1320/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1320/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1320") = 0 [pid 5052] mkdir("./1321", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 285.544363][T10965] loop0: detected capacity change from 0 to 512 [ 285.564569][T10965] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10967 attached , child_tidptr=0x555556d60690) = 10967 [pid 10967] set_robust_list(0x555556d606a0, 24) = 0 [pid 10967] chdir("./1321") = 0 [pid 10967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10967] setpgid(0, 0) = 0 [pid 10967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10967] write(3, "1000", 4) = 4 [pid 10967] close(3) = 0 [pid 10967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10967] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10967] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10967] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10967] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10967] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10968 attached [pid 10968] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10967] <... clone3 resumed> => {parent_tid=[10968]}, 88) = 10968 [pid 10968] set_robust_list(0x7f55300e29a0, 24 [pid 10967] rt_sigprocmask(SIG_SETMASK, [], [pid 10968] <... set_robust_list resumed>) = 0 [pid 10967] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10968] rt_sigprocmask(SIG_SETMASK, [], [pid 10967] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10968] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10967] <... futex resumed>) = 0 [pid 10968] memfd_create("syzkaller", 0 [pid 10967] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10968] <... memfd_create resumed>) = 3 [pid 10968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10967] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10968] <... mmap resumed>) = 0x7f5527ca1000 [pid 10967] <... mprotect resumed>) = 0 [pid 10967] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10967] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10969 attached => {parent_tid=[10969]}, 88) = 10969 [pid 10967] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10969] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10967] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10967] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10969] <... rseq resumed>) = 0 [pid 10969] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10969] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10969] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10968] <... write resumed>) = 262144 [pid 10968] munmap(0x7f5527ca1000, 262144 [pid 10969] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10967] <... futex resumed>) = 0 [pid 10967] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10967] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10968] <... munmap resumed>) = 0 [pid 10969] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10968] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10969] <... mount resumed>) = 0 [pid 10968] <... openat resumed>) = 5 [pid 10969] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10967] <... futex resumed>) = 0 [pid 10968] ioctl(5, LOOP_SET_FD, 3 [pid 10969] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10967] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10967] <... futex resumed>) = 0 [pid 10969] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10967] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10969] <... open resumed>) = 6 [pid 10969] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10967] <... futex resumed>) = 0 [pid 10969] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10967] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10969] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10967] <... futex resumed>) = 0 [pid 10969] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10967] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10968] <... ioctl resumed>) = 0 [pid 10968] close(3) = 0 [pid 10968] mkdir("./file1", 0777) = 0 [pid 10968] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10969] <... write resumed>) = 262144 [pid 10969] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10967] <... futex resumed>) = 0 [pid 10969] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10968] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10968] ioctl(5, LOOP_CLR_FD) = 0 [pid 10968] close(5) = 0 [pid 10968] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10968] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10967] exit_group(0 [pid 10969] <... futex resumed>) = ? [pid 10968] <... futex resumed>) = ? [pid 10967] <... exit_group resumed>) = ? [pid 10968] +++ exited with 0 +++ [pid 10969] +++ exited with 0 +++ [pid 10967] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10967, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] umount2("./1321", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1321/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1321/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1321/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1321/bus") = 0 [pid 5052] umount2("./1321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1321/binderfs") = 0 [pid 5052] umount2("./1321/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1321/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1321/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1321/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1321") = 0 [pid 5052] mkdir("./1322", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10970 attached , child_tidptr=0x555556d60690) = 10970 [pid 10970] set_robust_list(0x555556d606a0, 24) = 0 [pid 10970] chdir("./1322") = 0 [pid 10970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10970] setpgid(0, 0) = 0 [pid 10970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10970] write(3, "1000", 4) = 4 [pid 10970] close(3) = 0 [ 285.666700][T10968] loop0: detected capacity change from 0 to 512 [ 285.677183][T10968] ext4: Unknown parameter 'nouser_xattr' [pid 10970] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10970] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10970] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10970] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10970] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10970] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10970] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10971 attached => {parent_tid=[10971]}, 88) = 10971 [pid 10971] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10970] rt_sigprocmask(SIG_SETMASK, [], [pid 10971] <... rseq resumed>) = 0 [pid 10971] set_robust_list(0x7f55300e29a0, 24 [pid 10970] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10971] <... set_robust_list resumed>) = 0 [pid 10970] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10971] rt_sigprocmask(SIG_SETMASK, [], [pid 10970] <... futex resumed>) = 0 [pid 10971] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10970] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10971] memfd_create("syzkaller", 0 [pid 10970] <... futex resumed>) = 0 [pid 10970] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10971] <... memfd_create resumed>) = 3 [pid 10970] <... mmap resumed>) = 0x7f55300a1000 [pid 10971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10970] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10970] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10970] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10972]}, 88) = 10972 ./strace-static-x86_64: Process 10972 attached [pid 10970] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10970] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10970] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10972] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10972] <... rseq resumed>) = 0 [pid 10972] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10972] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10972] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10972] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10972] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10970] <... futex resumed>) = 0 [pid 10970] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10970] <... futex resumed>) = 0 [pid 10972] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10970] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10972] <... mount resumed>) = 0 [pid 10971] <... write resumed>) = 262144 [pid 10971] munmap(0x7f5527ca1000, 262144 [pid 10972] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10971] <... munmap resumed>) = 0 [pid 10971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10971] ioctl(5, LOOP_SET_FD, 3 [pid 10972] <... futex resumed>) = 1 [pid 10972] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10970] <... futex resumed>) = 0 [pid 10970] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10972] <... futex resumed>) = 0 [pid 10970] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10972] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10971] <... ioctl resumed>) = 0 [pid 10971] close(3) = 0 [pid 10971] mkdir("./file1", 0777) = 0 [pid 10971] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10972] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10970] <... futex resumed>) = 0 [pid 10970] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10970] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10971] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10971] ioctl(5, LOOP_CLR_FD) = 0 [pid 10971] close(5) = 0 [pid 10971] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10971] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10972] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 10972] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10970] <... futex resumed>) = 0 [pid 10972] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10970] exit_group(0 [pid 10972] <... futex resumed>) = ? [pid 10971] <... futex resumed>) = ? [pid 10970] <... exit_group resumed>) = ? [pid 10972] +++ exited with 0 +++ [pid 10971] +++ exited with 0 +++ [pid 10970] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10970, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1322", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1322/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1322/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1322/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1322/bus") = 0 [pid 5052] umount2("./1322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1322/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1322/binderfs") = 0 [pid 5052] umount2("./1322/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1322/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1322/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1322/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1322") = 0 [pid 5052] mkdir("./1323", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 285.763929][T10971] loop0: detected capacity change from 0 to 512 [ 285.774309][T10971] ext4: Unknown parameter 'nouser_xattr' [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 10973 ./strace-static-x86_64: Process 10973 attached [pid 10973] set_robust_list(0x555556d606a0, 24) = 0 [pid 10973] chdir("./1323") = 0 [pid 10973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10973] setpgid(0, 0) = 0 [pid 10973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10973] write(3, "1000", 4) = 4 [pid 10973] close(3) = 0 [pid 10973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10973] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10973] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10973] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10973] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10973] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10974 attached => {parent_tid=[10974]}, 88) = 10974 [pid 10974] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10973] rt_sigprocmask(SIG_SETMASK, [], [pid 10974] set_robust_list(0x7f55300e29a0, 24 [pid 10973] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10974] <... set_robust_list resumed>) = 0 [pid 10973] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10974] rt_sigprocmask(SIG_SETMASK, [], [pid 10973] <... futex resumed>) = 0 [pid 10974] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10973] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10974] memfd_create("syzkaller", 0 [pid 10973] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10974] <... memfd_create resumed>) = 3 [pid 10973] <... mprotect resumed>) = 0 [pid 10974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10973] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10973] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10975]}, 88) = 10975 [pid 10973] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 10975 attached NULL, 8) = 0 [pid 10975] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10973] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10975] <... rseq resumed>) = 0 [pid 10974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10975] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10973] <... futex resumed>) = 0 [pid 10975] rt_sigprocmask(SIG_SETMASK, [], [pid 10974] <... write resumed>) = 262144 [pid 10973] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10975] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10975] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10974] munmap(0x7f5527ca1000, 262144 [pid 10975] <... open resumed>) = 4 [pid 10975] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10974] <... munmap resumed>) = 0 [pid 10973] <... futex resumed>) = 0 [pid 10975] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10973] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10973] <... futex resumed>) = 0 [pid 10975] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10973] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10975] <... mount resumed>) = 0 [pid 10974] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10974] ioctl(5, LOOP_SET_FD, 3 [pid 10975] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10973] <... futex resumed>) = 0 [pid 10975] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10973] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10973] <... futex resumed>) = 0 [pid 10975] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10973] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10975] <... open resumed>) = 6 [pid 10975] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10973] <... futex resumed>) = 0 [pid 10975] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10973] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10973] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10975] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10975] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10974] <... ioctl resumed>) = 0 [pid 10974] close(3) = 0 [pid 10974] mkdir("./file1", 0777) = 0 [pid 10974] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10975] <... write resumed>) = 262144 [pid 10974] ioctl(5, LOOP_CLR_FD [pid 10975] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10973] <... futex resumed>) = 0 [pid 10975] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10974] <... ioctl resumed>) = 0 [pid 10974] close(5) = 0 [pid 10974] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10973] exit_group(0 [pid 10975] <... futex resumed>) = ? [pid 10973] <... exit_group resumed>) = ? [pid 10975] +++ exited with 0 +++ [pid 10974] +++ exited with 0 +++ [pid 10973] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10973, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 285.880637][T10974] loop0: detected capacity change from 0 to 512 [ 285.898539][T10974] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1323/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1323/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1323/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1323/bus") = 0 [pid 5052] umount2("./1323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1323/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1323/binderfs") = 0 [pid 5052] umount2("./1323/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1323/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1323/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1323/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1323") = 0 [pid 5052] mkdir("./1324", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10976 attached , child_tidptr=0x555556d60690) = 10976 [pid 10976] set_robust_list(0x555556d606a0, 24) = 0 [pid 10976] chdir("./1324") = 0 [pid 10976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10976] setpgid(0, 0) = 0 [pid 10976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10976] write(3, "1000", 4) = 4 [pid 10976] close(3) = 0 [pid 10976] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10976] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10976] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10976] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10976] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10976] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10976] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10977 attached => {parent_tid=[10977]}, 88) = 10977 [pid 10976] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10976] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10976] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10977] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10976] <... futex resumed>) = 0 [pid 10976] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10976] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10977] <... rseq resumed>) = 0 [pid 10976] <... mprotect resumed>) = 0 [pid 10977] set_robust_list(0x7f55300e29a0, 24 [pid 10976] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10977] <... set_robust_list resumed>) = 0 [pid 10976] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10976] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10978 attached [pid 10977] rt_sigprocmask(SIG_SETMASK, [], [pid 10976] <... clone3 resumed> => {parent_tid=[10978]}, 88) = 10978 [pid 10976] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10976] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10976] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10978] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10977] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10978] <... rseq resumed>) = 0 [pid 10978] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10978] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10978] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 3 [pid 10977] memfd_create("syzkaller", 0 [pid 10978] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10977] <... memfd_create resumed>) = 4 [pid 10976] <... futex resumed>) = 0 [pid 10978] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10976] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10976] <... futex resumed>) = 0 [pid 10978] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10977] <... mmap resumed>) = 0x7f5527ca1000 [pid 10976] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10978] <... mount resumed>) = 0 [pid 10978] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10977] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10976] <... futex resumed>) = 0 [pid 10976] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10978] <... futex resumed>) = 1 [pid 10976] <... futex resumed>) = 0 [pid 10978] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10976] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10978] <... open resumed>) = 5 [pid 10978] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10976] <... futex resumed>) = 0 [pid 10978] <... futex resumed>) = 1 [pid 10976] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10978] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 ENOSPC (No space left on device) [pid 10976] <... futex resumed>) = 0 [pid 10978] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10976] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10978] <... futex resumed>) = 0 [pid 10976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10978] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10977] <... write resumed>) = 262144 [pid 10977] munmap(0x7f5527ca1000, 262144) = 0 [pid 10977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10977] ioctl(6, LOOP_SET_FD, 4) = 0 [pid 10977] close(4) = 0 [pid 10977] mkdir("./file1", 0777) = 0 [pid 10977] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10977] ioctl(6, LOOP_CLR_FD) = 0 [pid 10977] close(6) = 0 [pid 10977] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10977] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10976] exit_group(0) = ? [pid 10978] <... futex resumed>) = ? [pid 10978] +++ exited with 0 +++ [pid 10977] <... futex resumed>) = ? [pid 10977] +++ exited with 0 +++ [pid 10976] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10976, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1324", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1324/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1324/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1324/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1324/bus") = 0 [pid 5052] umount2("./1324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1324/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1324/binderfs") = 0 [pid 5052] umount2("./1324/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1324/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1324/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1324/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1324") = 0 [pid 5052] mkdir("./1325", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 286.020441][T10977] loop0: detected capacity change from 0 to 512 [ 286.030451][T10977] ext4: Unknown parameter 'nouser_xattr' [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10979 attached , child_tidptr=0x555556d60690) = 10979 [pid 10979] set_robust_list(0x555556d606a0, 24) = 0 [pid 10979] chdir("./1325") = 0 [pid 10979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10979] setpgid(0, 0) = 0 [pid 10979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10979] write(3, "1000", 4) = 4 [pid 10979] close(3) = 0 [pid 10979] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10979] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10979] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10979] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10979] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10979] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10979] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10980 attached [pid 10980] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10980] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10980] rt_sigprocmask(SIG_SETMASK, [], [pid 10979] <... clone3 resumed> => {parent_tid=[10980]}, 88) = 10980 [pid 10980] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10979] rt_sigprocmask(SIG_SETMASK, [], [pid 10980] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10979] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10979] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10980] <... futex resumed>) = 0 [pid 10979] <... futex resumed>) = 1 [pid 10979] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10980] memfd_create("syzkaller", 0) = 3 [pid 10980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527cc2000 [pid 10979] <... futex resumed>) = 0 [pid 10979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5527ca1000 [pid 10979] mprotect(0x7f5527ca2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10979] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10979] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5527cc1990, parent_tid=0x7f5527cc1990, exit_signal=0, stack=0x7f5527ca1000, stack_size=0x20300, tls=0x7f5527cc16c0}./strace-static-x86_64: Process 10981 attached => {parent_tid=[10981]}, 88) = 10981 [pid 10981] rseq(0x7f5527cc1fe0, 0x20, 0, 0x53053053 [pid 10980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10981] <... rseq resumed>) = 0 [pid 10979] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10979] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10981] set_robust_list(0x7f5527cc19a0, 24 [pid 10979] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10981] <... set_robust_list resumed>) = 0 [pid 10981] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10981] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10980] <... write resumed>) = 262144 [pid 10980] munmap(0x7f5527cc2000, 262144 [pid 10981] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10980] <... munmap resumed>) = 0 [pid 10981] <... futex resumed>) = 1 [pid 10980] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10979] <... futex resumed>) = 0 [pid 10981] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10980] <... openat resumed>) = 5 [pid 10979] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10981] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10980] ioctl(5, LOOP_SET_FD, 3 [pid 10979] <... futex resumed>) = 0 [pid 10981] <... mount resumed>) = 0 [pid 10979] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10981] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10979] <... futex resumed>) = 0 [pid 10979] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10979] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10981] <... futex resumed>) = 1 [pid 10981] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10981] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10979] <... futex resumed>) = 0 [pid 10979] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10981] <... futex resumed>) = 1 [pid 10980] <... ioctl resumed>) = 0 [pid 10979] <... futex resumed>) = 0 [pid 10979] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10981] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10980] close(3) = 0 [pid 10980] mkdir("./file1", 0777) = 0 [pid 10980] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10980] ioctl(5, LOOP_CLR_FD) = 0 [pid 10980] close(5 [pid 10981] <... write resumed>) = 262144 [pid 10980] <... close resumed>) = 0 [pid 10981] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10980] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10981] <... futex resumed>) = 1 [pid 10980] <... futex resumed>) = 0 [pid 10979] <... futex resumed>) = 0 [pid 10981] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10980] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10979] exit_group(0 [pid 10981] <... futex resumed>) = ? [pid 10980] <... futex resumed>) = ? [pid 10979] <... exit_group resumed>) = ? [pid 10981] +++ exited with 0 +++ [pid 10980] +++ exited with 0 +++ [pid 10979] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10979, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1325/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1325/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1325/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1325/bus") = 0 [pid 5052] umount2("./1325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1325/binderfs") = 0 [pid 5052] umount2("./1325/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1325/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1325/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1325/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1325/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1325") = 0 [pid 5052] mkdir("./1326", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10982 attached , child_tidptr=0x555556d60690) = 10982 [pid 10982] set_robust_list(0x555556d606a0, 24) = 0 [pid 10982] chdir("./1326") = 0 [pid 10982] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10982] setpgid(0, 0) = 0 [pid 10982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10982] write(3, "1000", 4) = 4 [pid 10982] close(3) = 0 [ 286.124393][T10980] loop0: detected capacity change from 0 to 512 [ 286.135949][T10980] ext4: Unknown parameter 'nouser_xattr' [pid 10982] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10982] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10982] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10982] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10982] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10982] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10982] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10983 attached => {parent_tid=[10983]}, 88) = 10983 [pid 10983] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10983] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10983] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10983] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10982] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10982] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10983] <... futex resumed>) = 0 [pid 10982] <... futex resumed>) = 1 [pid 10982] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 10983] memfd_create("syzkaller", 0) = 3 [pid 10982] <... mmap resumed>) = 0x7f55300a1000 [pid 10982] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10982] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10982] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10984 attached [pid 10983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10984] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10983] <... mmap resumed>) = 0x7f5527ca1000 [pid 10984] set_robust_list(0x7f55300c19a0, 24 [pid 10982] <... clone3 resumed> => {parent_tid=[10984]}, 88) = 10984 [pid 10982] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10982] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10984] <... set_robust_list resumed>) = 0 [pid 10982] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10984] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10984] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10983] <... write resumed>) = 262144 [pid 10984] <... futex resumed>) = 1 [pid 10982] <... futex resumed>) = 0 [pid 10984] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10983] munmap(0x7f5527ca1000, 262144 [pid 10982] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10983] <... munmap resumed>) = 0 [pid 10984] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10982] <... futex resumed>) = 0 [pid 10983] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10982] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10984] <... mount resumed>) = 0 [pid 10983] <... openat resumed>) = 5 [pid 10983] ioctl(5, LOOP_SET_FD, 3 [pid 10984] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10984] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10982] <... futex resumed>) = 0 [pid 10982] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10984] <... futex resumed>) = 0 [pid 10984] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 10982] <... futex resumed>) = 1 [pid 10982] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10984] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10982] <... futex resumed>) = 0 [pid 10984] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10982] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10982] <... futex resumed>) = 0 [pid 10984] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10982] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10983] <... ioctl resumed>) = 0 [pid 10983] close(3) = 0 [pid 10983] mkdir("./file1", 0777) = 0 [pid 10983] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10984] <... write resumed>) = 262144 [pid 10983] ioctl(5, LOOP_CLR_FD [pid 10984] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10983] <... ioctl resumed>) = 0 [pid 10984] <... futex resumed>) = 1 [pid 10982] <... futex resumed>) = 0 [pid 10984] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10983] close(5) = 0 [pid 10983] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10983] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10982] exit_group(0 [pid 10984] <... futex resumed>) = ? [pid 10982] <... exit_group resumed>) = ? [pid 10984] +++ exited with 0 +++ [pid 10983] <... futex resumed>) = ? [pid 10983] +++ exited with 0 +++ [pid 10982] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10982, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1326/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1326/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1326/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 286.222241][T10983] loop0: detected capacity change from 0 to 512 [ 286.231753][T10983] ext4: Unknown parameter 'nouser_xattr' [pid 5052] unlink("./1326/bus") = 0 [pid 5052] umount2("./1326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1326/binderfs") = 0 [pid 5052] umount2("./1326/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1326/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1326/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1326/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1326/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1326") = 0 [pid 5052] mkdir("./1327", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10985 attached , child_tidptr=0x555556d60690) = 10985 [pid 10985] set_robust_list(0x555556d606a0, 24) = 0 [pid 10985] chdir("./1327") = 0 [pid 10985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10985] setpgid(0, 0) = 0 [pid 10985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10985] write(3, "1000", 4) = 4 [pid 10985] close(3) = 0 [pid 10985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10985] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10985] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10985] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10985] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10986 attached [pid 10986] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10985] <... clone3 resumed> => {parent_tid=[10986]}, 88) = 10986 [pid 10986] <... rseq resumed>) = 0 [pid 10986] set_robust_list(0x7f55300e29a0, 24 [pid 10985] rt_sigprocmask(SIG_SETMASK, [], [pid 10986] <... set_robust_list resumed>) = 0 [pid 10985] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10986] rt_sigprocmask(SIG_SETMASK, [], [pid 10985] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10986] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10985] <... futex resumed>) = 0 [pid 10986] memfd_create("syzkaller", 0 [pid 10985] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10986] <... memfd_create resumed>) = 3 [pid 10985] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10985] <... mprotect resumed>) = 0 [pid 10986] <... mmap resumed>) = 0x7f5527ca1000 [pid 10985] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10985] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10987 attached => {parent_tid=[10987]}, 88) = 10987 [pid 10987] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10985] rt_sigprocmask(SIG_SETMASK, [], [pid 10987] <... rseq resumed>) = 0 [pid 10987] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10987] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10987] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10985] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10985] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10987] <... futex resumed>) = 0 [pid 10985] <... futex resumed>) = 1 [pid 10987] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10985] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10987] <... open resumed>) = 4 [pid 10987] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10987] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10986] <... write resumed>) = 262144 [pid 10985] <... futex resumed>) = 0 [pid 10986] munmap(0x7f5527ca1000, 262144 [pid 10985] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10986] <... munmap resumed>) = 0 [pid 10985] <... futex resumed>) = 1 [pid 10987] <... futex resumed>) = 0 [pid 10985] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10986] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10986] ioctl(5, LOOP_SET_FD, 3 [pid 10987] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10987] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10987] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10985] <... futex resumed>) = 0 [pid 10985] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10987] <... futex resumed>) = 0 [pid 10987] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10986] <... ioctl resumed>) = 0 [pid 10985] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10987] <... open resumed>) = 6 [pid 10987] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10987] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10986] close(3 [pid 10985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10986] <... close resumed>) = 0 [pid 10985] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10987] <... futex resumed>) = 0 [pid 10986] mkdir("./file1", 0777 [pid 10985] <... futex resumed>) = 1 [pid 10987] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10985] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10986] <... mkdir resumed>) = 0 [pid 10986] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10986] ioctl(5, LOOP_CLR_FD) = 0 [pid 10986] close(5) = 0 [pid 10986] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10986] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10987] <... write resumed>) = 262144 [pid 10987] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10985] <... futex resumed>) = 0 [pid 10987] <... futex resumed>) = 1 [pid 10985] exit_group(0 [pid 10986] <... futex resumed>) = ? [pid 10985] <... exit_group resumed>) = ? [pid 10987] +++ exited with 0 +++ [pid 10986] +++ exited with 0 +++ [pid 10985] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10985, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1327/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1327/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1327/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1327/bus") = 0 [pid 5052] umount2("./1327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1327/binderfs") = 0 [pid 5052] umount2("./1327/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1327/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1327/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 286.341253][T10986] loop0: detected capacity change from 0 to 512 [ 286.352154][T10986] ext4: Unknown parameter 'nouser_xattr' [pid 5052] openat(AT_FDCWD, "./1327/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1327/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1327") = 0 [pid 5052] mkdir("./1328", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10988 attached , child_tidptr=0x555556d60690) = 10988 [pid 10988] set_robust_list(0x555556d606a0, 24) = 0 [pid 10988] chdir("./1328") = 0 [pid 10988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10988] setpgid(0, 0) = 0 [pid 10988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10988] write(3, "1000", 4) = 4 [pid 10988] close(3) = 0 [pid 10988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10988] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10988] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10988] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10988] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10988] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10988] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10989 attached => {parent_tid=[10989]}, 88) = 10989 [pid 10989] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10988] rt_sigprocmask(SIG_SETMASK, [], [pid 10989] <... rseq resumed>) = 0 [pid 10989] set_robust_list(0x7f55300e29a0, 24 [pid 10988] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10989] <... set_robust_list resumed>) = 0 [pid 10988] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10989] rt_sigprocmask(SIG_SETMASK, [], [pid 10988] <... futex resumed>) = 0 [pid 10989] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10988] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10989] memfd_create("syzkaller", 0 [pid 10988] <... futex resumed>) = 0 [pid 10989] <... memfd_create resumed>) = 3 [pid 10988] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10988] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10989] <... mmap resumed>) = 0x7f5527ca1000 [pid 10988] <... mprotect resumed>) = 0 [pid 10989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10988] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10988] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10989] <... write resumed>) = 262144 [pid 10989] munmap(0x7f5527ca1000, 262144 [pid 10988] <... clone3 resumed> => {parent_tid=[10990]}, 88) = 10990 ./strace-static-x86_64: Process 10990 attached [pid 10988] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10990] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10989] <... munmap resumed>) = 0 [pid 10988] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10990] <... rseq resumed>) = 0 [pid 10989] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 10988] <... futex resumed>) = 0 [pid 10990] set_robust_list(0x7f55300c19a0, 24 [pid 10989] <... openat resumed>) = 4 [pid 10988] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10990] <... set_robust_list resumed>) = 0 [pid 10989] ioctl(4, LOOP_SET_FD, 3 [pid 10990] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10990] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 10990] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10988] <... futex resumed>) = 0 [pid 10988] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10990] <... futex resumed>) = 1 [pid 10988] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10990] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10989] <... ioctl resumed>) = 0 [pid 10989] close(3 [pid 10990] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10989] <... close resumed>) = 0 [pid 10989] mkdir("./file1", 0777 [pid 10990] <... futex resumed>) = 1 [pid 10990] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10989] <... mkdir resumed>) = 0 [pid 10988] <... futex resumed>) = 0 [pid 10989] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10988] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10988] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10990] <... futex resumed>) = 0 [pid 10990] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 10990] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10988] <... futex resumed>) = 0 [pid 10990] <... futex resumed>) = 1 [pid 10988] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10988] <... futex resumed>) = 0 [pid 10989] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10988] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10989] ioctl(4, LOOP_CLR_FD) = 0 [pid 10989] close(4) = 0 [pid 10989] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10989] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10990] <... write resumed>) = 262144 [pid 10990] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10988] <... futex resumed>) = 0 [pid 10990] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10988] exit_group(0 [pid 10990] <... futex resumed>) = ? [pid 10989] <... futex resumed>) = ? [pid 10988] <... exit_group resumed>) = ? [pid 10990] +++ exited with 0 +++ [pid 10989] +++ exited with 0 +++ [pid 10988] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10988, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5052] umount2("./1328", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [ 286.462415][T10989] loop0: detected capacity change from 0 to 512 [ 286.472527][T10989] ext4: Unknown parameter 'nouser_xattr' [pid 5052] umount2("./1328/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1328/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1328/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1328/bus") = 0 [pid 5052] umount2("./1328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1328/binderfs") = 0 [pid 5052] umount2("./1328/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1328/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1328/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1328/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1328/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1328") = 0 [pid 5052] mkdir("./1329", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10991 attached , child_tidptr=0x555556d60690) = 10991 [pid 10991] set_robust_list(0x555556d606a0, 24) = 0 [pid 10991] chdir("./1329") = 0 [pid 10991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10991] setpgid(0, 0) = 0 [pid 10991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10991] write(3, "1000", 4) = 4 [pid 10991] close(3) = 0 [pid 10991] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10991] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10991] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10991] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10991] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10991] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10991] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10991] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10992 attached [pid 10992] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10991] <... clone3 resumed> => {parent_tid=[10992]}, 88) = 10992 [pid 10992] <... rseq resumed>) = 0 [pid 10991] rt_sigprocmask(SIG_SETMASK, [], [pid 10992] set_robust_list(0x7f55300e29a0, 24 [pid 10991] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10992] <... set_robust_list resumed>) = 0 [pid 10991] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10992] rt_sigprocmask(SIG_SETMASK, [], [pid 10991] <... futex resumed>) = 0 [pid 10992] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10991] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10992] memfd_create("syzkaller", 0 [pid 10991] <... futex resumed>) = 0 [pid 10991] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10992] <... memfd_create resumed>) = 3 [pid 10991] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10991] <... mprotect resumed>) = 0 [pid 10992] <... mmap resumed>) = 0x7f5527ca1000 [pid 10991] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10991] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10991] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} => {parent_tid=[10993]}, 88) = 10993 [pid 10991] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10991] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10991] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 10993 attached [pid 10993] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053) = 0 [pid 10992] <... write resumed>) = 262144 [pid 10993] set_robust_list(0x7f55300c19a0, 24) = 0 [pid 10992] munmap(0x7f5527ca1000, 262144 [pid 10993] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10993] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10992] <... munmap resumed>) = 0 [pid 10992] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10992] ioctl(5, LOOP_SET_FD, 3 [pid 10993] <... open resumed>) = 4 [pid 10993] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10991] <... futex resumed>) = 0 [pid 10993] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10991] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10991] <... futex resumed>) = 0 [pid 10993] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10991] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10992] <... ioctl resumed>) = 0 [pid 10992] close(3) = 0 [pid 10993] <... mount resumed>) = 0 [pid 10992] mkdir("./file1", 0777) = 0 [pid 10993] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10992] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10993] <... futex resumed>) = 1 [pid 10991] <... futex resumed>) = 0 [pid 10993] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10991] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10993] <... futex resumed>) = 0 [pid 10991] <... futex resumed>) = 1 [pid 10993] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10991] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10993] <... open resumed>) = 3 [pid 10993] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10991] <... futex resumed>) = 0 [pid 10993] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10991] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10993] <... futex resumed>) = 0 [pid 10991] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10992] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10992] ioctl(5, LOOP_CLR_FD) = 0 [pid 10992] close(5) = 0 [pid 10992] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10992] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10993] <... write resumed>) = 262144 [pid 10993] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10991] <... futex resumed>) = 0 [pid 10991] exit_group(0) = ? [pid 10992] <... futex resumed>) = ? [pid 10992] +++ exited with 0 +++ [pid 10993] <... futex resumed>) = ? [pid 10993] +++ exited with 0 +++ [pid 10991] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10991, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] umount2("./1329", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [pid 5052] umount2("./1329/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1329/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1329/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1329/bus") = 0 [pid 5052] umount2("./1329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1329/binderfs") = 0 [pid 5052] umount2("./1329/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 286.572439][T10992] loop0: detected capacity change from 0 to 512 [ 286.587217][T10992] ext4: Unknown parameter 'nouser_xattr' [pid 5052] newfstatat(AT_FDCWD, "./1329/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1329/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1329/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1329/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1329") = 0 [pid 5052] mkdir("./1330", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10994 attached , child_tidptr=0x555556d60690) = 10994 [pid 10994] set_robust_list(0x555556d606a0, 24) = 0 [pid 10994] chdir("./1330") = 0 [pid 10994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10994] setpgid(0, 0) = 0 [pid 10994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10994] write(3, "1000", 4) = 4 [pid 10994] close(3) = 0 [pid 10994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10994] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10994] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10994] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10994] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10994] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10994] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 10995 attached [pid 10995] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053) = 0 [pid 10994] <... clone3 resumed> => {parent_tid=[10995]}, 88) = 10995 [pid 10995] set_robust_list(0x7f55300e29a0, 24) = 0 [pid 10994] rt_sigprocmask(SIG_SETMASK, [], [pid 10995] rt_sigprocmask(SIG_SETMASK, [], [pid 10994] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10995] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10994] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10995] memfd_create("syzkaller", 0 [pid 10994] <... futex resumed>) = 0 [pid 10994] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 [pid 10995] <... memfd_create resumed>) = 3 [pid 10994] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 10994] rt_sigprocmask(SIG_BLOCK, ~[], [pid 10995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 10994] <... rt_sigprocmask resumed>[], 8) = 0 [pid 10994] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 10996 attached [pid 10996] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10994] <... clone3 resumed> => {parent_tid=[10996]}, 88) = 10996 [pid 10996] <... rseq resumed>) = 0 [pid 10994] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10994] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10996] set_robust_list(0x7f55300c19a0, 24 [pid 10994] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10996] <... set_robust_list resumed>) = 0 [pid 10996] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10996] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 10996] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10994] <... futex resumed>) = 0 [ 286.633594][ T29] INFO: task syz-executor356:5406 blocked for more than 143 seconds. [ 286.652125][ T29] Not tainted 6.6.0-rc2-next-20230920-syzkaller #0 [ 286.660252][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.669338][ T29] task:syz-executor356 state:D stack:27568 pid:5406 ppid:5056 flags:0x00004006 [pid 10996] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10994] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10996] <... futex resumed>) = 0 [pid 10994] <... futex resumed>) = 1 [pid 10996] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 10994] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10996] <... mount resumed>) = 0 [pid 10995] <... write resumed>) = 262144 [pid 10995] munmap(0x7f5527ca1000, 262144) = 0 [pid 10995] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 10996] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10995] ioctl(5, LOOP_SET_FD, 3 [pid 10996] <... futex resumed>) = 1 [pid 10994] <... futex resumed>) = 0 [pid 10994] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10994] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10995] <... ioctl resumed>) = 0 [pid 10995] close(3) = 0 [pid 10995] mkdir("./file1", 0777) = 0 [pid 10996] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10995] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 10996] <... open resumed>) = 3 [pid 10995] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 10996] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10995] ioctl(5, LOOP_CLR_FD [pid 10996] <... futex resumed>) = 1 [pid 10995] <... ioctl resumed>) = 0 [pid 10994] <... futex resumed>) = 0 [pid 10996] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10994] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10996] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 10995] close(5 [pid 10994] <... futex resumed>) = 0 [pid 10996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10995] <... close resumed>) = 0 [ 286.695334][ T29] Call Trace: [ 286.702940][ T29] [ 286.707293][T10995] loop0: detected capacity change from 0 to 512 [ 286.713160][ T29] __schedule+0xee1/0x5a00 [ 286.718057][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.724148][ T29] ? io_schedule_timeout+0x150/0x150 [ 286.728273][T10995] ext4: Unknown parameter 'nouser_xattr' [ 286.729954][ T29] ? find_held_lock+0x2d/0x110 [ 286.740015][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [pid 10994] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10996] <... write resumed>) = 262144 [pid 10996] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10994] <... futex resumed>) = 0 [pid 10996] <... futex resumed>) = 1 [pid 10996] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10995] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10994] exit_group(0 [pid 10996] <... futex resumed>) = ? [pid 10994] <... exit_group resumed>) = ? [pid 10996] +++ exited with 0 +++ [pid 10995] <... futex resumed>) = ? [ 286.754688][ T29] ? do_raw_spin_lock+0x12e/0x2b0 [ 286.759785][ T29] schedule+0xe7/0x1b0 [ 286.763897][ T29] io_schedule+0xbe/0x130 [ 286.772706][ T29] folio_wait_bit_common+0x3dc/0x9c0 [ 286.779285][ T29] ? folio_wait_bit_common+0x13d/0x9c0 [ 286.785555][ T29] ? filemap_fdatawait_keep_errors+0x30/0x30 [ 286.792042][ T29] ? folio_unlock+0xd0/0xd0 [ 286.797665][ T29] ? preempt_count_sub+0x150/0x150 [pid 10995] +++ exited with 0 +++ [pid 10994] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10994, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5052] umount2("./1330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [ 286.803443][ T29] clean_bdev_aliases+0x56b/0x610 [ 286.813081][ T29] ? __lock_buffer+0x70/0x70 [ 286.818214][ T29] ? folio_create_buffers+0x109/0x160 [ 286.823811][ T29] ? do_raw_spin_unlock+0x173/0x230 [ 286.829162][ T29] ? _raw_spin_unlock+0x28/0x40 [ 286.838070][ T29] __block_write_begin_int+0x8d6/0x14d0 [ 286.843726][ T29] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 286.849421][ T29] ? __filemap_get_folio+0x31c/0xbc0 [ 286.854811][ T29] iomap_write_begin+0x5be/0x17b0 [ 286.859868][ T29] ? balance_dirty_pages_ratelimited_flags+0x9b5/0x1280 [ 286.866895][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.872293][ T29] ? iomap_adjust_read_range.isra.0+0x650/0x650 [ 286.878595][ T29] ? fault_in_readable+0x150/0x200 [ 286.883761][ T29] ? fault_in_subpage_writeable+0x20/0x20 [ 286.889593][ T29] iomap_file_buffered_write+0x3d6/0x9a0 [ 286.895295][ T29] ? iomap_write_begin+0x17b0/0x17b0 [ 286.900575][ T29] ? find_held_lock+0x2d/0x110 [ 286.905496][ T29] ? __mark_inode_dirty+0x297/0xd50 [ 286.910743][ T29] ? preempt_count_add+0x72/0x140 [ 286.915868][ T29] ? mnt_put_write_access_file+0xc1/0xf0 [ 286.921560][ T29] blkdev_write_iter+0x4f5/0xc90 [ 286.926662][ T29] vfs_write+0x650/0xe40 [ 286.930946][ T29] ? kernel_write+0x6c0/0x6c0 [ 286.935715][ T29] ? __fget_files+0x272/0x410 [ 286.940685][ T29] ? __fget_light+0xe6/0x260 [ 286.945399][ T29] ksys_write+0x12f/0x250 [ 286.949771][ T29] ? __ia32_sys_read+0xb0/0xb0 [ 286.954529][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 286.959862][ T29] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.965165][ T29] ? ptrace_notify+0xf4/0x130 [ 286.969906][ T29] do_syscall_64+0x38/0xb0 [ 286.974331][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.980339][ T29] RIP: 0033:0x7f5530125d49 [ 286.984827][ T29] RSP: 002b:00007f55300c1218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.993231][ T29] RAX: ffffffffffffffda RBX: 00007f55301ad6d8 RCX: 00007f5530125d49 [pid 5052] umount2("./1330/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1330/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1330/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1330/bus") = 0 [pid 5052] umount2("./1330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1330/binderfs") = 0 [pid 5052] umount2("./1330/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1330/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1330/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1330/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1330/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [ 287.001246][ T29] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000003 [ 287.009285][ T29] RBP: 00007f55301ad6d0 R08: 0000000000000000 R09: 0000000000000000 [ 287.017332][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f553017a578 [ 287.025419][ T29] R13: 0000000000000006 R14: 00007fff228ee220 R15: 6f6f6c2f7665642f [ 287.033392][ T29] [ 287.037156][ T29] INFO: task syz-executor356:5774 blocked for more than 143 seconds. [ 287.045542][ T29] Not tainted 6.6.0-rc2-next-20230920-syzkaller #0 [pid 5052] rmdir("./1330") = 0 [pid 5052] mkdir("./1331", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 10997 attached , child_tidptr=0x555556d60690) = 10997 [pid 10997] set_robust_list(0x555556d606a0, 24) = 0 [pid 10997] chdir("./1331") = 0 [pid 10997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 10997] setpgid(0, 0) = 0 [pid 10997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 10997] write(3, "1000", 4) = 4 [pid 10997] close(3) = 0 [pid 10997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 10997] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10997] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 10997] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 10997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 10997] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 10997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0} => {parent_tid=[10998]}, 88) = 10998 [pid 10997] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 10997] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10997] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300a1000 ./strace-static-x86_64: Process 10998 attached [pid 10997] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE [pid 10998] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 10997] <... mprotect resumed>) = 0 [pid 10997] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 10998] <... rseq resumed>) = 0 [pid 10998] set_robust_list(0x7f55300e29a0, 24 [pid 10997] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0} [pid 10998] <... set_robust_list resumed>) = 0 [pid 10998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 10999 attached [pid 10999] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 10998] memfd_create("syzkaller", 0 [pid 10999] <... rseq resumed>) = 0 [pid 10999] set_robust_list(0x7f55300c19a0, 24 [pid 10998] <... memfd_create resumed>) = 3 [pid 10997] <... clone3 resumed> => {parent_tid=[10999]}, 88) = 10999 [pid 10999] <... set_robust_list resumed>) = 0 [pid 10997] rt_sigprocmask(SIG_SETMASK, [], [pid 10999] rt_sigprocmask(SIG_SETMASK, [], [pid 10997] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10999] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 10997] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10999] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 10997] <... futex resumed>) = 0 [pid 10999] <... open resumed>) = 4 [pid 10998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 10997] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10998] <... mmap resumed>) = 0x7f5527ca1000 [pid 10999] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10997] <... futex resumed>) = 0 [pid 10997] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10997] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10999] <... futex resumed>) = 1 [pid 10999] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 10999] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 10997] <... futex resumed>) = 0 [pid 10997] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10999] <... futex resumed>) = 1 [pid 10999] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 10997] <... futex resumed>) = 0 [pid 10999] <... open resumed>) = 5 [pid 10997] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10999] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 10997] <... futex resumed>) = 0 [pid 10999] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 10997] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 10999] <... write resumed>) = -1 ENOSPC (No space left on device) [pid 10997] <... futex resumed>) = 0 [pid 10999] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 10997] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 10999] futex(0x7f55301ad6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 287.052592][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.061624][ T29] task:syz-executor356 state:D stack:27568 pid:5774 ppid:5058 flags:0x00004006 [ 287.083373][ T29] Call Trace: [ 287.092279][ T29] [pid 10998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 10998] munmap(0x7f5527ca1000, 262144) = 0 [pid 10998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 10998] ioctl(6, LOOP_SET_FD, 3) = 0 [pid 10998] close(3) = 0 [pid 10998] mkdir("./file1", 0777) = 0 [pid 10998] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"...) = -1 EINVAL (Invalid argument) [pid 10998] ioctl(6, LOOP_CLR_FD) = 0 [pid 10998] close(6) = 0 [pid 10998] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 287.106447][ T29] __schedule+0xee1/0x5a00 [ 287.110938][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.117114][ T29] ? io_schedule_timeout+0x150/0x150 [ 287.123007][ T29] ? find_held_lock+0x2d/0x110 [ 287.126500][T10998] loop0: detected capacity change from 0 to 512 [ 287.127912][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.138747][T10998] ext4: Unknown parameter 'nouser_xattr' [ 287.140460][ T29] ? do_raw_spin_lock+0x12e/0x2b0 [ 287.150186][ T29] schedule+0xe7/0x1b0 [pid 10998] futex(0x7f55301ad6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 10997] exit_group(0) = ? [pid 10998] <... futex resumed>) = ? [pid 10998] +++ exited with 0 +++ [pid 10999] <... futex resumed>) = ? [pid 10999] +++ exited with 0 +++ [pid 10997] +++ exited with 0 +++ [pid 5052] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10997, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5052] umount2("./1331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5052] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 5 entries */, 32768) = 136 [ 287.154820][ T29] io_schedule+0xbe/0x130 [ 287.160355][ T29] folio_wait_bit_common+0x3dc/0x9c0 [ 287.166521][ T29] ? folio_wait_bit_common+0x13d/0x9c0 [ 287.172131][ T29] ? filemap_fdatawait_keep_errors+0x30/0x30 [ 287.181069][ T29] ? folio_unlock+0xd0/0xd0 [ 287.189601][ T29] ? preempt_count_sub+0x150/0x150 [ 287.195301][ T29] clean_bdev_aliases+0x56b/0x610 [ 287.204758][ T29] ? __lock_buffer+0x70/0x70 [ 287.209748][ T29] ? folio_create_buffers+0x109/0x160 [ 287.215490][ T29] ? do_raw_spin_unlock+0x173/0x230 [ 287.220753][ T29] ? _raw_spin_unlock+0x28/0x40 [ 287.225662][ T29] __block_write_begin_int+0x8d6/0x14d0 [ 287.231254][ T29] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 287.236849][ T29] ? __filemap_get_folio+0x31c/0xbc0 [ 287.242164][ T29] iomap_write_begin+0x5be/0x17b0 [ 287.247233][ T29] ? balance_dirty_pages_ratelimited_flags+0x9b5/0x1280 [ 287.254366][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.260080][ T29] ? iomap_adjust_read_range.isra.0+0x650/0x650 [ 287.266371][ T29] ? fault_in_readable+0x150/0x200 [ 287.271509][ T29] ? fault_in_subpage_writeable+0x20/0x20 [ 287.277290][ T29] iomap_file_buffered_write+0x3d6/0x9a0 [ 287.282966][ T29] ? iomap_write_begin+0x17b0/0x17b0 [ 287.288319][ T29] ? find_held_lock+0x2d/0x110 [ 287.293134][ T29] ? __mark_inode_dirty+0x297/0xd50 [ 287.298542][ T29] ? preempt_count_add+0x72/0x140 [ 287.303592][ T29] ? mnt_put_write_access_file+0xc1/0xf0 [ 287.309287][ T29] blkdev_write_iter+0x4f5/0xc90 [ 287.314262][ T29] vfs_write+0x650/0xe40 [ 287.318552][ T29] ? kernel_write+0x6c0/0x6c0 [ 287.323299][ T29] ? __fget_files+0x272/0x410 [ 287.328023][ T29] ? __fget_light+0xe6/0x260 [ 287.332638][ T29] ksys_write+0x12f/0x250 [ 287.337006][ T29] ? __ia32_sys_read+0xb0/0xb0 [ 287.341790][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 287.347042][ T29] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.352278][ T29] ? ptrace_notify+0xf4/0x130 [ 287.357002][ T29] do_syscall_64+0x38/0xb0 [ 287.361435][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.367664][ T29] RIP: 0033:0x7f5530125d49 [ 287.372098][ T29] RSP: 002b:00007f55300c1218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.380659][ T29] RAX: ffffffffffffffda RBX: 00007f55301ad6d8 RCX: 00007f5530125d49 [ 287.388654][ T29] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000003 [ 287.396681][ T29] RBP: 00007f55301ad6d0 R08: 0000000000000000 R09: 0000000000000000 [pid 5052] umount2("./1331/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5052] umount2("./1331/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1331/bus", {st_mode=S_IFREG|000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1331/bus") = 0 [pid 5052] umount2("./1331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] unlink("./1331/binderfs") = 0 [pid 5052] umount2("./1331/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] newfstatat(AT_FDCWD, "./1331/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5052] umount2("./1331/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5052] openat(AT_FDCWD, "./1331/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5052] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5052] getdents64(4, 0x555556d69770 /* 2 entries */, 32768) = 48 [pid 5052] getdents64(4, 0x555556d69770 /* 0 entries */, 32768) = 0 [pid 5052] close(4) = 0 [pid 5052] rmdir("./1331/file1") = 0 [pid 5052] getdents64(3, 0x555556d61730 /* 0 entries */, 32768) = 0 [pid 5052] close(3) = 0 [pid 5052] rmdir("./1331") = 0 [pid 5052] mkdir("./1332", 0777) = 0 [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5052] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5052] close(3) = 0 [pid 5052] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d60690) = 11000 ./strace-static-x86_64: Process 11000 attached [pid 11000] set_robust_list(0x555556d606a0, 24) = 0 [pid 11000] chdir("./1332") = 0 [pid 11000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 11000] setpgid(0, 0) = 0 [pid 11000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 287.404703][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f553017a578 [ 287.412670][ T29] R13: 0000000000000006 R14: 00007fff228ee220 R15: 6f6f6c2f7665642f [ 287.420713][ T29] [ 287.423849][ T29] INFO: task syz-executor356:6156 blocked for more than 144 seconds. [ 287.434242][ T29] Not tainted 6.6.0-rc2-next-20230920-syzkaller #0 [pid 11000] write(3, "1000", 4) = 4 [pid 11000] close(3) = 0 [pid 11000] symlink("/dev/binderfs", "./binderfs") = 0 [pid 11000] futex(0x7f55301ad6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 11000] rt_sigaction(SIGRT_1, {sa_handler=0x7f553014c160, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f553013d310}, NULL, 8) = 0 [pid 11000] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 11000] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f55300c2000 [pid 11000] mprotect(0x7f55300c3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 11000] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 11000] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300e2990, parent_tid=0x7f55300e2990, exit_signal=0, stack=0x7f55300c2000, stack_size=0x20300, tls=0x7f55300e26c0}./strace-static-x86_64: Process 11001 attached [pid 11001] rseq(0x7f55300e2fe0, 0x20, 0, 0x53053053 [pid 11000] <... clone3 resumed> => {parent_tid=[11001]}, 88) = 11001 [pid 11000] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 11000] futex(0x7f55301ad6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 11001] <... rseq resumed>) = 0 [pid 11000] <... futex resumed>) = 0 [pid 11001] set_robust_list(0x7f55300e29a0, 24 [pid 11000] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 11001] <... set_robust_list resumed>) = 0 [pid 11000] <... futex resumed>) = 0 [pid 11001] rt_sigprocmask(SIG_SETMASK, [], [pid 11000] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 11001] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 11000] <... mmap resumed>) = 0x7f55300a1000 [pid 11001] memfd_create("syzkaller", 0) = 3 [pid 11000] mprotect(0x7f55300a2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 11000] rt_sigprocmask(SIG_BLOCK, ~[], [pid 11001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5527ca1000 [pid 11000] <... rt_sigprocmask resumed>[], 8) = 0 [pid 11000] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f55300c1990, parent_tid=0x7f55300c1990, exit_signal=0, stack=0x7f55300a1000, stack_size=0x20300, tls=0x7f55300c16c0}./strace-static-x86_64: Process 11002 attached [pid 11002] rseq(0x7f55300c1fe0, 0x20, 0, 0x53053053 [pid 11001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 11000] <... clone3 resumed> => {parent_tid=[11002]}, 88) = 11002 [pid 11000] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 11000] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 11000] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 11002] <... rseq resumed>) = 0 [pid 11002] set_robust_list(0x7f55300c19a0, 24 [pid 11001] <... write resumed>) = 262144 [pid 11002] <... set_robust_list resumed>) = 0 [pid 11002] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 11002] open("./bus", O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 11001] munmap(0x7f5527ca1000, 262144) = 0 [pid 11001] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 11001] ioctl(4, LOOP_SET_FD, 3 [pid 11002] <... open resumed>) = 5 [pid 11001] <... ioctl resumed>) = 0 [pid 11001] close(3) = 0 [pid 11001] mkdir("./file1", 0777) = 0 [ 287.451612][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.461212][ T29] task:syz-executor356 state:D stack:27568 pid:6156 ppid:5053 flags:0x00004006 [ 287.471735][ T29] Call Trace: [ 287.476100][ T29] [ 287.479720][ T29] __schedule+0xee1/0x5a00 [ 287.485379][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.489870][T11001] loop0: detected capacity change from 0 to 512 [ 287.492344][ T29] ? io_schedule_timeout+0x150/0x150 [pid 11001] mount("/dev/loop0", "./file1", "ext4", MS_NOSYMFOLLOW|MS_NOATIME|MS_REC, "nouser_xattr,init_itable,i_version,grpquota,noauto_da_alloc,resgid=0x0000000000000000,sysvgroups,ini"... [pid 11002] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 11001] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 11001] ioctl(4, LOOP_CLR_FD [pid 11000] <... futex resumed>) = 0 [pid 11000] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 11000] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 11002] <... futex resumed>) = 1 [pid 11002] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 11002] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 11000] <... futex resumed>) = 0 [pid 11000] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 11000] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 11002] <... futex resumed>) = 1 [pid 11002] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 3 [pid 11002] futex(0x7f55301ad6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 11000] <... futex resumed>) = 0 [pid 11002] <... futex resumed>) = 1 [pid 11000] futex(0x7f55301ad6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 11000] futex(0x7f55301ad6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 287.500622][T11001] ext4: Unknown parameter 'nouser_xattr' [ 287.504387][ T29] ? find_held_lock+0x2d/0x110 [ 287.513671][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.519174][ T29] ? do_raw_spin_lock+0x12e/0x2b0 [ 287.524449][ T29] schedule+0xe7/0x1b0 [ 287.528610][ T29] io_schedule+0xbe/0x130 [ 287.532995][ T29] folio_wait_bit_common+0x3dc/0x9c0 [ 287.538332][ T29] ? folio_wait_bit_common+0x13d/0x9c0 [ 287.543838][ T29] ? filemap_fdatawait_keep_errors+0x30/0x30 [ 287.549898][ T29] ? folio_unlock+0xd0/0xd0 [pid 11002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x65\x78\x74\x34\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 11000] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 287.554426][ T29] ? preempt_count_sub+0x150/0x150 [ 287.559610][ T29] clean_bdev_aliases+0x56b/0x610 [ 287.564709][ T29] ? __lock_buffer+0x70/0x70 [ 287.569317][ T29] ? folio_create_buffers+0x109/0x160 [ 287.574765][ T29] ? do_raw_spin_unlock+0x173/0x230 [ 287.580014][ T29] ? _raw_spin_unlock+0x28/0x40 [ 287.585123][ T29] __block_write_begin_int+0x8d6/0x14d0 [ 287.590747][ T29] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 287.596387][ T29] ? __filemap_get_folio+0x31c/0xbc0 [ 287.601726][ T29] iomap_write_begin+0x5be/0x17b0 [ 287.606825][ T29] ? balance_dirty_pages_ratelimited_flags+0x9b5/0x1280 [ 287.613788][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.619245][ T29] ? iomap_adjust_read_range.isra.0+0x650/0x650 [ 287.625552][ T29] ? fault_in_readable+0x150/0x200 [ 287.630667][ T29] ? fault_in_subpage_writeable+0x20/0x20 [ 287.636465][ T29] iomap_file_buffered_write+0x3d6/0x9a0 [ 287.642156][ T29] ? iomap_write_begin+0x17b0/0x17b0 [ 287.647557][ T29] ? find_held_lock+0x2d/0x110 [ 287.652359][ T29] ? __mark_inode_dirty+0x297/0xd50 [ 287.657603][ T29] ? preempt_count_add+0x72/0x140 [ 287.662666][ T29] ? mnt_put_write_access_file+0xc1/0xf0 [ 287.668361][ T29] blkdev_write_iter+0x4f5/0xc90 [ 287.673356][ T29] vfs_write+0x650/0xe40 [ 287.677686][ T29] ? kernel_write+0x6c0/0x6c0 [ 287.682395][ T29] ? __fget_files+0x272/0x410 [ 287.687143][ T29] ? __fget_light+0xe6/0x260 [ 287.691789][ T29] ksys_write+0x12f/0x250 [ 287.696183][ T29] ? __ia32_sys_read+0xb0/0xb0 [ 287.700992][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [pid 11000] exit_group(0) = ? [ 287.706592][ T29] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.711842][ T29] ? ptrace_notify+0xf4/0x130 [ 287.717045][ T29] do_syscall_64+0x38/0xb0 [ 287.721495][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.727449][ T29] RIP: 0033:0x7f5530125d49 [ 287.731998][ T29] RSP: 002b:00007f55300c1218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.740520][ T29] RAX: ffffffffffffffda RBX: 00007f55301ad6d8 RCX: 00007f5530125d49 [ 287.748549][ T29] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000003 [ 287.756565][ T29] RBP: 00007f55301ad6d0 R08: 0000000000000000 R09: 0000000000000000 [ 287.764555][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f553017a578 [ 287.772574][ T29] R13: 0000000000000006 R14: 00007fff228ee220 R15: 6f6f6c2f7665642f [ 287.780634][ T29] [ 287.783704][ T29] [ 287.783704][ T29] Showing all locks held in the system: [ 287.791487][ T29] 1 lock held by khungtaskd/29: [ 287.796375][ T29] #0: ffffffff8cbaac60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 287.806311][ T29] 2 locks held by getty/4805: [ 287.810992][ T29] #0: ffff88814bb380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.820807][ T29] #1: ffffc900015c02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc5/0x1480 [ 287.831002][ T29] [ 287.833329][ T29] ============================================= [ 287.833329][ T29] [ 287.841766][ T29] NMI backtrace for cpu 0 [ 287.846105][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.0-rc2-next-20230920-syzkaller #0 [ 287.855401][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 287.865467][ T29] Call Trace: [ 287.868751][ T29] [ 287.871684][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.876413][ T29] nmi_cpu_backtrace+0x277/0x380 [ 287.881386][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.886606][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 287.892619][ T29] watchdog+0xf87/0x1210 [ 287.896895][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.902885][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 287.908105][ T29] ? __kthread_parkme+0x14b/0x220 [ 287.913148][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.919143][ T29] kthread+0x33c/0x440 [ 287.923224][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.928450][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.934097][ T29] ret_from_fork+0x45/0x80 [ 287.938548][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.944204][ T29] ret_from_fork_asm+0x11/0x20 [ 287.949012][ T29] [ 287.952145][ T29] Sending NMI from CPU 0 to CPUs 1: [ 287.957393][ C1] NMI backtrace for cpu 1 [ 287.957403][ C1] CPU: 1 PID: 5048 Comm: strace-static-x Not tainted 6.6.0-rc2-next-20230920-syzkaller #0 [ 287.957425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 287.957436][ C1] RIP: 0010:mark_lock+0x10a/0x1950 [ 287.957467][ C1] Code: 81 e2 ff 1f 0f b7 d2 be 08 00 00 00 48 89 d0 48 89 54 24 38 48 c1 e8 06 48 8d 3c c5 80 2e a0 91 e8 0b 78 76 00 48 8b 54 24 38 <48> 0f a3 15 2e f8 37 10 0f 83 61 01 00 00 48 69 d2 d0 00 00 00 48 [ 287.957486][ C1] RSP: 0018:ffffc90003c3f710 EFLAGS: 00000046 [ 287.957502][ C1] RAX: 0000000000000001 RBX: ffff8880226328a8 RCX: ffffffff81683645 [ 287.957515][ C1] RDX: 0000000000000020 RSI: 0000000000000008 RDI: ffffffff91a02e80 [ 287.957528][ C1] RBP: ffffc90003c3f878 R08: 0000000000000000 R09: fffffbfff23405d0 [ 287.957540][ C1] R10: ffffffff91a02e87 R11: 0000000000000000 R12: 0000000000000200 [ 287.957553][ C1] R13: 0000000000000009 R14: 1ffff92000787eea R15: ffff8880226328c8 [ 287.957566][ C1] FS: 00000000011e93c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 287.957586][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.957599][ C1] CR2: 00007f5530179858 CR3: 000000007c2de000 CR4: 00000000003506e0 [ 287.957612][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.957623][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.957635][ C1] Call Trace: [ 287.957642][ C1] [ 287.957648][ C1] ? show_regs+0x8f/0xa0 [ 287.957670][ C1] ? nmi_cpu_backtrace+0x1d4/0x380 [ 287.957706][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.957732][ C1] ? nmi_handle+0x1a6/0x570 [ 287.957753][ C1] ? mark_lock+0x10a/0x1950 [ 287.957776][ C1] ? default_do_nmi+0x69/0x160 [ 287.957799][ C1] ? exc_nmi+0x171/0x1e0 [ 287.957819][ C1] ? end_repeat_nmi+0x16/0x31 [ 287.957845][ C1] ? mark_lock+0x105/0x1950 [ 287.957869][ C1] ? mark_lock+0x10a/0x1950 [ 287.957892][ C1] ? mark_lock+0x10a/0x1950 [ 287.957917][ C1] ? mark_lock+0x10a/0x1950 [ 287.957940][ C1] [ 287.957946][ C1] [ 287.957952][ C1] ? mark_lock+0x105/0x1950 [ 287.957976][ C1] ? print_usage_bug.part.0+0x670/0x670 [ 287.958002][ C1] ? print_usage_bug.part.0+0x670/0x670 [ 287.958032][ C1] ? __lock_acquire+0x182f/0x5de0 [ 287.958060][ C1] __lock_acquire+0x975/0x5de0 [ 287.958090][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.958117][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.958149][ C1] ? print_usage_bug.part.0+0x670/0x670 [ 287.958176][ C1] lock_acquire+0x1ae/0x510 [ 287.958200][ C1] ? __task_pid_nr_ns+0x39/0x500 [ 287.958228][ C1] ? lock_sync+0x190/0x190 [ 287.958252][ C1] ? wait_consider_task+0x75d/0x40c0 [ 287.958279][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.958309][ C1] __task_pid_nr_ns+0x3f/0x500 [ 287.958334][ C1] ? __task_pid_nr_ns+0x39/0x500 [ 287.958360][ C1] wait_consider_task+0x7c8/0x40c0 [ 287.958389][ C1] ? lock_sync+0x190/0x190 [ 287.958413][ C1] ? io_schedule_timeout+0x150/0x150 [ 287.958436][ C1] ? release_task+0x1ae0/0x1ae0 [ 287.958467][ C1] __do_wait+0x2a9/0x890 [ 287.958495][ C1] ? do_wait+0x1e2/0x520 [ 287.958520][ C1] do_wait+0x212/0x520 [ 287.958547][ C1] kernel_wait4+0x16d/0x280 [ 287.958575][ C1] ? __ia32_sys_waitid+0x150/0x150 [ 287.958603][ C1] ? kill_orphaned_pgrp+0x340/0x340 [ 287.958631][ C1] ? find_held_lock+0x2d/0x110 [ 287.958657][ C1] __do_sys_wait4+0x15b/0x170 [ 287.958684][ C1] ? kernel_wait4+0x280/0x280 [ 287.958719][ C1] ? syscall_enter_from_user_mode+0x26/0x80 [ 287.958744][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 287.958768][ C1] do_syscall_64+0x38/0xb0 [ 287.958787][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.958809][ C1] RIP: 0033:0x4d6ad6 [ 287.958823][ C1] Code: 00 00 00 90 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 49 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 90 48 83 ec 28 89 54 24 14 48 89 74 24 [ 287.958841][ C1] RSP: 002b:00007ffdc10c68f8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 287.958859][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004d6ad6 [ 287.958871][ C1] RDX: 0000000040000000 RSI: 00007ffdc10c691c RDI: 00000000ffffffff [ 287.958884][ C1] RBP: 0000000000000000 R08: 0000000000000017 R09: 0000000000000000 [ 287.958895][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000011f0a40 [ 287.958907][ C1] R13: 00007ffdc10c691c R14: 00000000011eace0 R15: 000000000063f160 [ 287.958927][ C1] [ 287.958933][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.541 msecs [ 287.959394][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 288.411142][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.0-rc2-next-20230920-syzkaller #0 [ 288.420434][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 288.430509][ T29] Call Trace: [ 288.433790][ T29] [ 288.436725][ T29] dump_stack_lvl+0xd9/0x1b0 [ 288.441332][ T29] panic+0x6dc/0x790 [ 288.445250][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 288.450381][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 288.455780][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 288.460996][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 288.466392][ T29] ? watchdog+0xd3e/0x1210 [ 288.470831][ T29] watchdog+0xd4f/0x1210 [ 288.475087][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 288.481081][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 288.486304][ T29] ? __kthread_parkme+0x14b/0x220 [ 288.491342][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 288.497331][ T29] kthread+0x33c/0x440 [ 288.501410][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.506628][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 288.512275][ T29] ret_from_fork+0x45/0x80 [ 288.516704][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 288.522350][ T29] ret_from_fork_asm+0x11/0x20 [ 288.527252][ T29] [ 288.530482][ T29] Kernel Offset: disabled [ 288.534879][ T29] Rebooting in 86400 seconds..