./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor122175935 <...> Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. execve("./syz-executor122175935", ["./syz-executor122175935"], 0x7fff3d99b930 /* 10 vars */) = 0 brk(NULL) = 0x555555cd6000 brk(0x555555cd6e00) = 0x555555cd6e00 arch_prctl(ARCH_SET_FS, 0x555555cd6480) = 0 set_tid_address(0x555555cd6750) = 5028 set_robust_list(0x555555cd6760, 24) = 0 rseq(0x555555cd6da0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor122175935", 4096) = 27 getrandom("\x89\xf4\x8d\x70\x3d\x2c\x05\xeb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555cd6e00 brk(0x555555cf7e00) = 0x555555cf7e00 brk(0x555555cf8000) = 0x555555cf8000 mprotect(0x7fd9acaab000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5028 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "5028", 4) = 4 close(3) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fd9ac9cfd90, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fd9ac9cfd90, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 mkdir("./syzkaller.1XBxkg", 0700) = 0 chmod("./syzkaller.1XBxkg", 0777) = 0 chdir("./syzkaller.1XBxkg") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5029 attached [pid 5029] set_robust_list(0x555555cd6760, 24) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x555555cd6750) = 5029 [pid 5029] chdir("./0") = 0 [pid 5029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5029] setpgid(0, 0) = 0 [pid 5029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5029] write(3, "1000", 4) = 4 [pid 5029] close(3) = 0 [pid 5029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5029] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5029] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5029] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5029] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5031]}, 88) = 5031 [pid 5029] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5029] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5031 attached [pid 5031] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5031] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5031] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5031] memfd_create("syzkaller", 0) = 3 [pid 5031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5031] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5031] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5031] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 60.593539][ T5031] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5031 'syz-executor122' [pid 5031] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5031] close(3) = 0 [pid 5031] mkdir("./file1", 0777) = 0 [ 60.636508][ T5031] loop0: detected capacity change from 0 to 4096 [ 60.660103][ T5031] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 60.675299][ T5031] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 5031] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5031] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5031] chdir("./file1") = 0 [pid 5031] ioctl(4, LOOP_CLR_FD) = 0 [pid 5031] close(4) = 0 [pid 5031] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5031] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5031] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5029] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] <... open resumed>) = 4 [pid 5031] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5031] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5029] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] <... open resumed>) = 5 [pid 5031] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5031] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5031] ftruncate(5, 33587195 [pid 5029] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] <... ftruncate resumed>) = 0 [pid 5031] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5031] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5031] sendfile(4, 5, NULL, 281474978811909 [ 60.691171][ T5031] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5029] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5029] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5029] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5029] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5032]}, 88) = 5032 [pid 5029] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5029] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5032 attached [pid 5032] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5032] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5032] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5032] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... futex resumed>) = 0 [pid 5029] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... futex resumed>) = 1 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5032] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... futex resumed>) = 0 [pid 5029] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] <... futex resumed>) = 1 [pid 5032] sendfile(6, 7, NULL, 281474978811909 [pid 5029] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5029] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5029] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5029] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5029] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5029] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5033]}, 88) = 5033 [pid 5029] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5029] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5033 attached [pid 5033] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5033] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5033] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5033] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5033] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... futex resumed>) = 0 [pid 5029] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] <... futex resumed>) = 1 [pid 5033] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5033] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5033] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] exit_group(0 [pid 5033] <... futex resumed>) = ? [pid 5029] <... exit_group resumed>) = ? [pid 5033] +++ exited with 0 +++ [pid 5031] <... sendfile resumed>) = ? [pid 5031] +++ exited with 0 +++ [pid 5032] <... sendfile resumed>) = ? [pid 5032] +++ exited with 0 +++ [pid 5029] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5029, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5034 ./strace-static-x86_64: Process 5034 attached [pid 5034] set_robust_list(0x555555cd6760, 24) = 0 [pid 5034] chdir("./1") = 0 [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5034] setpgid(0, 0) = 0 [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5034] write(3, "1000", 4) = 4 [pid 5034] close(3) = 0 [pid 5034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5034] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5034] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5034] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5034] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5035 attached => {parent_tid=[5035]}, 88) = 5035 [pid 5035] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5034] rt_sigprocmask(SIG_SETMASK, [], [pid 5035] <... rseq resumed>) = 0 [pid 5034] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5035] set_robust_list(0x7fd9ac9c59a0, 24 [pid 5034] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... set_robust_list resumed>) = 0 [pid 5034] <... futex resumed>) = 0 [pid 5035] rt_sigprocmask(SIG_SETMASK, [], [pid 5034] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5035] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5035] memfd_create("syzkaller", 0) = 3 [pid 5035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 61.031369][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5035] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5035] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5035] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5035] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5035] close(3) = 0 [pid 5035] mkdir("./file1", 0777) = 0 [pid 5035] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5035] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5035] chdir("./file1") = 0 [pid 5035] ioctl(4, LOOP_CLR_FD) = 0 [pid 5035] close(4) = 0 [pid 5035] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5034] <... futex resumed>) = 0 [pid 5034] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5035] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5034] <... futex resumed>) = 0 [pid 5034] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5035] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5034] <... futex resumed>) = 0 [pid 5034] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 61.120746][ T5035] loop0: detected capacity change from 0 to 4096 [ 61.130792][ T5035] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 61.145790][ T5035] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 61.161296][ T5035] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5034] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] ftruncate(5, 33587195) = 0 [pid 5035] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5034] <... futex resumed>) = 0 [pid 5034] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] sendfile(4, 5, NULL, 281474978811909 [pid 5034] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5034] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5034] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5034] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5034] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5034] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5036]}, 88) = 5036 [pid 5034] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5034] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5036 attached [pid 5036] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5036] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5036] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5036] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5036] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = 0 [pid 5034] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] <... futex resumed>) = 1 [pid 5036] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5036] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = 0 [pid 5034] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5036] <... futex resumed>) = 1 [pid 5036] sendfile(6, 7, NULL, 281474978811909 [pid 5034] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5034] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5034] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5034] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5034] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5037]}, 88) = 5037 ./strace-static-x86_64: Process 5037 attached [pid 5037] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5037] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5037] rt_sigprocmask(SIG_SETMASK, [], [pid 5034] rt_sigprocmask(SIG_SETMASK, [], [pid 5037] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5034] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5037] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5034] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5037] <... futex resumed>) = 0 [pid 5037] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5037] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5034] <... futex resumed>) = 0 [pid 5037] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... futex resumed>) = 0 [pid 5034] <... futex resumed>) = 1 [pid 5037] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5034] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5037] <... fallocate resumed>) = 0 [pid 5037] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5034] <... futex resumed>) = 0 [pid 5037] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] exit_group(0) = ? [pid 5037] <... futex resumed>) = ? [pid 5037] +++ exited with 0 +++ [pid 5035] <... sendfile resumed>) = ? [pid 5035] +++ exited with 0 +++ [pid 5036] <... sendfile resumed>) = ? [pid 5036] +++ exited with 0 +++ [pid 5034] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5038 attached [pid 5038] set_robust_list(0x555555cd6760, 24) = 0 [pid 5038] chdir("./2") = 0 [pid 5038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5038] setpgid(0, 0) = 0 [pid 5038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5038] write(3, "1000", 4) = 4 [pid 5038] close(3) = 0 [ 61.495086][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5038] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5038] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5038] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5038] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5039]}, 88) = 5039 [pid 5038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5038] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5039 attached [pid 5039] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5039] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5039] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x555555cd6750) = 5038 [pid 5039] memfd_create("syzkaller", 0) = 3 [pid 5039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5039] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5039] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5039] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5039] close(3) = 0 [pid 5039] mkdir("./file1", 0777) = 0 [pid 5039] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5039] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5039] chdir("./file1") = 0 [pid 5039] ioctl(4, LOOP_CLR_FD) = 0 [pid 5039] close(4) = 0 [pid 5039] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5038] <... futex resumed>) = 0 [pid 5039] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5038] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] <... open resumed>) = 4 [pid 5039] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... futex resumed>) = 0 [pid 5038] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] <... futex resumed>) = 1 [pid 5039] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5039] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... futex resumed>) = 0 [pid 5038] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] <... futex resumed>) = 1 [pid 5039] ftruncate(5, 33587195) = 0 [pid 5039] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5038] <... futex resumed>) = 0 [pid 5039] sendfile(4, 5, NULL, 281474978811909 [pid 5038] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 61.600203][ T5039] loop0: detected capacity change from 0 to 4096 [ 61.610848][ T5039] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 61.624446][ T5039] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 61.637597][ T5039] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5038] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5038] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5038] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5038] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5040 attached => {parent_tid=[5040]}, 88) = 5040 [pid 5038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5038] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5040] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5040] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5040] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5040] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5038] <... futex resumed>) = 0 [pid 5040] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5038] <... futex resumed>) = 0 [pid 5040] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5038] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] <... open resumed>) = 7 [pid 5040] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... futex resumed>) = 0 [pid 5038] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5040] <... futex resumed>) = 1 [pid 5038] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] sendfile(6, 7, NULL, 281474978811909 [pid 5038] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5038] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5038] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5038] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5041]}, 88) = 5041 [pid 5038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5038] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5041 attached [pid 5041] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5041] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5041] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5041] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5041] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... futex resumed>) = 0 [pid 5038] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] <... futex resumed>) = 1 [pid 5041] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5041] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5038] <... futex resumed>) = 0 [pid 5041] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] exit_group(0 [pid 5041] <... futex resumed>) = ? [pid 5038] <... exit_group resumed>) = ? [pid 5041] +++ exited with 0 +++ [pid 5039] <... sendfile resumed>) = ? [pid 5040] <... sendfile resumed>) = ? [pid 5040] +++ exited with 0 +++ [pid 5039] +++ exited with 0 +++ [pid 5038] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5038, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=40 /* 0.40 s */} --- umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5042 ./strace-static-x86_64: Process 5042 attached [pid 5042] set_robust_list(0x555555cd6760, 24) = 0 [pid 5042] chdir("./3") = 0 [pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5042] setpgid(0, 0) = 0 [pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5042] write(3, "1000", 4) = 4 [pid 5042] close(3) = 0 [pid 5042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5042] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5042] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 61.999908][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5042] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5043]}, 88) = 5043 [pid 5042] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5042] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5043 attached [pid 5043] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5043] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5043] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5043] memfd_create("syzkaller", 0) = 3 [pid 5043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5043] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5043] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5043] close(3) = 0 [pid 5043] mkdir("./file1", 0777) = 0 [ 62.105263][ T5043] loop0: detected capacity change from 0 to 4096 [ 62.124982][ T5043] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 62.140696][ T5043] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 5043] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5043] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5043] chdir("./file1") = 0 [pid 5043] ioctl(4, LOOP_CLR_FD) = 0 [pid 5043] close(4) = 0 [pid 5043] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5043] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 1 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5043] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 1 [pid 5043] ftruncate(5, 33587195) = 0 [pid 5043] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5043] <... futex resumed>) = 1 [ 62.156014][ T5043] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5043] sendfile(4, 5, NULL, 281474978811909 [pid 5042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5042] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5042] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5044 attached => {parent_tid=[5044]}, 88) = 5044 [pid 5042] rt_sigprocmask(SIG_SETMASK, [], [pid 5044] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5042] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5042] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] <... rseq resumed>) = 0 [pid 5044] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5044] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5044] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5044] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5044] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5042] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5044] sendfile(6, 7, NULL, 281474978811909 [pid 5042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5042] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5042] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5042] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5042] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5042] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5045]}, 88) = 5045 [pid 5042] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5042] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5045 attached [pid 5045] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5045] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5045] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5045] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5042] <... futex resumed>) = 0 [pid 5045] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5042] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5042] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... fallocate resumed>) = 0 [pid 5045] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] <... futex resumed>) = 0 [pid 5045] <... futex resumed>) = 1 [pid 5045] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] exit_group(0 [pid 5045] <... futex resumed>) = ? [pid 5042] <... exit_group resumed>) = ? [pid 5045] +++ exited with 0 +++ [pid 5044] <... sendfile resumed>) = ? [pid 5043] <... sendfile resumed>) = ? [pid 5044] +++ exited with 0 +++ [pid 5043] +++ exited with 0 +++ [pid 5042] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5042, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5046 ./strace-static-x86_64: Process 5046 attached [pid 5046] set_robust_list(0x555555cd6760, 24) = 0 [pid 5046] chdir("./4") = 0 [ 62.501332][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5046] setpgid(0, 0) = 0 [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1000", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5046] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5046] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5046] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5047]}, 88) = 5047 ./strace-static-x86_64: Process 5047 attached [pid 5047] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5047] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5047] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5047] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5046] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5047] <... futex resumed>) = 0 [pid 5046] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5047] memfd_create("syzkaller", 0) = 3 [pid 5047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5047] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5047] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5047] close(3) = 0 [pid 5047] mkdir("./file1", 0777) = 0 [pid 5047] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5047] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5047] chdir("./file1") = 0 [pid 5047] ioctl(4, LOOP_CLR_FD) = 0 [pid 5047] close(4) = 0 [pid 5047] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5047] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5046] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5047] <... futex resumed>) = 0 [pid 5047] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5046] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5047] <... open resumed>) = 4 [pid 5047] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5047] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5046] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5047] <... futex resumed>) = 0 [pid 5047] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5047] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5046] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5047] ftruncate(5, 33587195) = 0 [pid 5047] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5047] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5046] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5046] <... futex resumed>) = 0 [pid 5046] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 62.623952][ T5047] loop0: detected capacity change from 0 to 4096 [ 62.633095][ T5047] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 62.647520][ T5047] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 62.660530][ T5047] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5047] sendfile(4, 5, NULL, 281474978811909 [pid 5046] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5046] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5046] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5046] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5048]}, 88) = 5048 [pid 5046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5046] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5048 attached [pid 5048] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5048] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5048] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5048] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = 0 [pid 5046] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5048] <... futex resumed>) = 1 [pid 5048] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5048] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5048] sendfile(6, 7, NULL, 281474978811909 [pid 5046] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5046] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5046] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5046] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5046] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5049 attached => {parent_tid=[5049]}, 88) = 5049 [pid 5049] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5049] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5049] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5049] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5046] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5049] <... futex resumed>) = 0 [pid 5049] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5046] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] <... open resumed>) = 8 [pid 5049] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = 0 [pid 5046] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5049] <... futex resumed>) = 1 [pid 5049] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5049] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5049] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5046] exit_group(0) = ? [pid 5049] <... futex resumed>) = ? [pid 5049] +++ exited with 0 +++ [pid 5048] <... sendfile resumed>) = ? [pid 5048] +++ exited with 0 +++ [pid 5047] <... sendfile resumed>) = ? [pid 5047] +++ exited with 0 +++ [pid 5046] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5046, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5050 ./strace-static-x86_64: Process 5050 attached [pid 5050] set_robust_list(0x555555cd6760, 24) = 0 [pid 5050] chdir("./5") = 0 [pid 5050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5050] setpgid(0, 0) = 0 [pid 5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5050] write(3, "1000", 4) = 4 [pid 5050] close(3) = 0 [pid 5050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5050] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5050] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5050] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5051]}, 88) = 5051 [pid 5050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5050] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5051 attached [pid 5051] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5051] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5051] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 62.994757][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5051] memfd_create("syzkaller", 0) = 3 [pid 5051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5051] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5051] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5051] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5051] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5051] close(3) = 0 [pid 5051] mkdir("./file1", 0777) = 0 [pid 5051] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5051] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5051] chdir("./file1") = 0 [pid 5051] ioctl(4, LOOP_CLR_FD) = 0 [pid 5051] close(4) = 0 [pid 5051] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5050] <... futex resumed>) = 0 [pid 5051] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5050] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... open resumed>) = 4 [pid 5051] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = 0 [pid 5050] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... futex resumed>) = 1 [pid 5051] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5051] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = 0 [pid 5050] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... futex resumed>) = 1 [pid 5051] ftruncate(5, 33587195) = 0 [pid 5051] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = 0 [pid 5050] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... futex resumed>) = 1 [ 63.093419][ T5051] loop0: detected capacity change from 0 to 4096 [ 63.104122][ T5051] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 63.117078][ T5051] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 63.129422][ T5051] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5051] sendfile(4, 5, NULL, 281474978811909 [pid 5050] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5050] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5050] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5050] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5050] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5052]}, 88) = 5052 [pid 5050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5050] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5052 attached [pid 5052] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5052] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5052] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5052] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5050] <... futex resumed>) = 0 [pid 5050] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5052] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5050] <... futex resumed>) = 0 [pid 5050] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5052] sendfile(6, 7, NULL, 281474978811909 [pid 5050] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5050] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5050] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5053 attached => {parent_tid=[5053]}, 88) = 5053 [pid 5053] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5050] rt_sigprocmask(SIG_SETMASK, [], [pid 5053] <... rseq resumed>) = 0 [pid 5050] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5053] set_robust_list(0x7fd9a47839a0, 24 [pid 5050] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] <... set_robust_list resumed>) = 0 [pid 5050] <... futex resumed>) = 0 [pid 5050] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5053] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5053] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5050] <... futex resumed>) = 0 [pid 5053] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5050] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5050] <... futex resumed>) = 0 [pid 5053] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5050] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5053] <... fallocate resumed>) = 0 [pid 5053] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5050] <... futex resumed>) = 0 [pid 5053] <... futex resumed>) = 1 [pid 5053] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5050] exit_group(0 [pid 5053] <... futex resumed>) = ? [pid 5050] <... exit_group resumed>) = ? [pid 5053] +++ exited with 0 +++ [pid 5051] <... sendfile resumed>) = ? [pid 5052] <... sendfile resumed>) = ? [pid 5052] +++ exited with 0 +++ [pid 5051] +++ exited with 0 +++ [pid 5050] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5050, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5054 ./strace-static-x86_64: Process 5054 attached [pid 5054] set_robust_list(0x555555cd6760, 24) = 0 [pid 5054] chdir("./6") = 0 [pid 5054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5054] setpgid(0, 0) = 0 [pid 5054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "1000", 4) = 4 [pid 5054] close(3) = 0 [pid 5054] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5054] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5054] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5054] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5054] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5055]}, 88) = 5055 [pid 5054] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5054] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5055 attached [pid 5055] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5055] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5055] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 63.457251][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5055] memfd_create("syzkaller", 0) = 3 [pid 5055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5055] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5055] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5055] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5055] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5055] close(3) = 0 [pid 5055] mkdir("./file1", 0777) = 0 [pid 5055] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5055] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5055] chdir("./file1") = 0 [pid 5055] ioctl(4, LOOP_CLR_FD) = 0 [pid 5055] close(4) = 0 [pid 5055] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5054] <... futex resumed>) = 0 [pid 5055] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5054] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] <... open resumed>) = 4 [pid 5055] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... futex resumed>) = 0 [pid 5054] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] <... futex resumed>) = 1 [pid 5055] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5055] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... futex resumed>) = 0 [pid 5054] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] <... futex resumed>) = 1 [pid 5055] ftruncate(5, 33587195) = 0 [pid 5055] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... futex resumed>) = 0 [pid 5054] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5055] <... futex resumed>) = 1 [ 63.552142][ T5055] loop0: detected capacity change from 0 to 4096 [ 63.562205][ T5055] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 63.577204][ T5055] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 63.592612][ T5055] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5055] sendfile(4, 5, NULL, 281474978811909 [pid 5054] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5054] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5054] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5054] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5056]}, 88) = 5056 ./strace-static-x86_64: Process 5056 attached [pid 5054] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5054] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... rseq resumed>) = 0 [pid 5054] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5056] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5056] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... futex resumed>) = 0 [pid 5056] <... futex resumed>) = 1 [pid 5054] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5056] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... futex resumed>) = 0 [pid 5054] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... futex resumed>) = 1 [pid 5056] sendfile(6, 7, NULL, 281474978811909 [pid 5054] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5054] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5054] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5054] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5054] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5057 attached => {parent_tid=[5057]}, 88) = 5057 [pid 5057] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5054] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] <... rseq resumed>) = 0 [pid 5054] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] set_robust_list(0x7fd9a47839a0, 24 [pid 5054] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5054] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... set_robust_list resumed>) = 0 [pid 5057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5057] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5057] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5057] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] <... futex resumed>) = 0 [pid 5054] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5054] <... futex resumed>) = 0 [pid 5057] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5054] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... fallocate resumed>) = 0 [pid 5057] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5054] <... futex resumed>) = 0 [pid 5057] <... futex resumed>) = 1 [pid 5057] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] exit_group(0 [pid 5057] <... futex resumed>) = ? [pid 5054] <... exit_group resumed>) = ? [pid 5057] +++ exited with 0 +++ [pid 5055] <... sendfile resumed>) = ? [pid 5055] +++ exited with 0 +++ [pid 5056] <... sendfile resumed>) = ? [pid 5056] +++ exited with 0 +++ [pid 5054] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5054, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5058 ./strace-static-x86_64: Process 5058 attached [ 63.917023][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5058] set_robust_list(0x555555cd6760, 24) = 0 [pid 5058] chdir("./7") = 0 [pid 5058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5058] setpgid(0, 0) = 0 [pid 5058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "1000", 4) = 4 [pid 5058] close(3) = 0 [pid 5058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5058] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5058] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5058] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5059 attached => {parent_tid=[5059]}, 88) = 5059 [pid 5058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5058] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5059] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] memfd_create("syzkaller", 0) = 3 [pid 5059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5059] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5059] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5059] close(3) = 0 [pid 5059] mkdir("./file1", 0777) = 0 [pid 5059] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5059] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] chdir("./file1") = 0 [pid 5059] ioctl(4, LOOP_CLR_FD) = 0 [pid 5059] close(4) = 0 [pid 5059] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... futex resumed>) = 0 [pid 5058] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] <... futex resumed>) = 1 [pid 5059] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5059] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5058] <... futex resumed>) = 0 [pid 5058] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5059] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... futex resumed>) = 0 [pid 5058] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] <... futex resumed>) = 1 [pid 5059] ftruncate(5, 33587195) = 0 [pid 5059] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... futex resumed>) = 0 [pid 5058] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] <... futex resumed>) = 1 [ 64.034280][ T5059] loop0: detected capacity change from 0 to 4096 [ 64.043520][ T5059] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 64.058594][ T5059] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 64.073535][ T5059] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5059] sendfile(4, 5, NULL, 281474978811909 [pid 5058] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5058] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5060]}, 88) = 5060 [pid 5058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5058] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5060 attached [pid 5060] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5060] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5060] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5060] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... futex resumed>) = 0 [pid 5058] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... futex resumed>) = 1 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5060] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... futex resumed>) = 0 [pid 5058] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... futex resumed>) = 1 [pid 5060] sendfile(6, 7, NULL, 281474978811909 [pid 5058] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5058] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5061 attached => {parent_tid=[5061]}, 88) = 5061 [pid 5058] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5058] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... rseq resumed>) = 0 [pid 5061] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5061] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5061] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5058] <... futex resumed>) = 0 [pid 5058] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5061] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5058] <... futex resumed>) = 0 [pid 5061] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] exit_group(0 [pid 5061] <... futex resumed>) = ? [pid 5058] <... exit_group resumed>) = ? [pid 5060] <... sendfile resumed>) = ? [pid 5059] <... sendfile resumed>) = ? [pid 5059] +++ exited with 0 +++ [pid 5060] +++ exited with 0 +++ [pid 5061] +++ exited with 0 +++ [pid 5058] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5058, si_uid=0, si_status=0, si_utime=0, si_stime=37 /* 0.37 s */} --- umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5062 ./strace-static-x86_64: Process 5062 attached [pid 5062] set_robust_list(0x555555cd6760, 24) = 0 [pid 5062] chdir("./8") = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5062] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5062] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5063]}, 88) = 5063 [pid 5062] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5062] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5063 attached [pid 5063] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5063] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] memfd_create("syzkaller", 0) = 3 [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 64.404888][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5063] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5063] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5063] close(3) = 0 [pid 5063] mkdir("./file1", 0777) = 0 [pid 5063] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5063] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] chdir("./file1") = 0 [pid 5063] ioctl(4, LOOP_CLR_FD) = 0 [pid 5063] close(4) = 0 [pid 5063] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... open resumed>) = 4 [pid 5063] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5063] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] <... futex resumed>) = 0 [pid 5063] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... open resumed>) = 5 [pid 5063] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5063] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] <... futex resumed>) = 0 [pid 5063] ftruncate(5, 33587195 [pid 5062] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... ftruncate resumed>) = 0 [pid 5063] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5063] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5062] <... futex resumed>) = 0 [pid 5063] sendfile(4, 5, NULL, 281474978811909 [ 64.494015][ T5063] loop0: detected capacity change from 0 to 4096 [ 64.503336][ T5063] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 64.518899][ T5063] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 64.535263][ T5063] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5062] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5062] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5062] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5064]}, 88) = 5064 [pid 5062] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5062] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5064 attached [pid 5064] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5064] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5064] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5064] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] <... futex resumed>) = 1 [pid 5064] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5064] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] <... futex resumed>) = 1 [pid 5064] sendfile(6, 7, NULL, 281474978811909 [pid 5062] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5062] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5062] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5065 attached => {parent_tid=[5065]}, 88) = 5065 [pid 5065] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5065] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5065] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5065] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5062] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5065] <... futex resumed>) = 0 [pid 5062] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5065] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... futex resumed>) = 0 [pid 5062] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5062] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... futex resumed>) = 1 [pid 5065] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5065] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5062] <... futex resumed>) = 0 [pid 5065] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5062] exit_group(0 [pid 5065] <... futex resumed>) = ? [pid 5062] <... exit_group resumed>) = ? [pid 5065] +++ exited with 0 +++ [pid 5063] <... sendfile resumed>) = ? [pid 5063] +++ exited with 0 +++ [pid 5064] <... sendfile resumed>) = ? [pid 5064] +++ exited with 0 +++ [pid 5062] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=42 /* 0.42 s */} --- umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5066] set_robust_list(0x555555cd6760, 24) = 0 [pid 5066] chdir("./9") = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 64.905577][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5066] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5066] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5067 attached => {parent_tid=[5067]}, 88) = 5067 [pid 5067] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5067] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5066] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5066] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] memfd_create("syzkaller", 0) = 3 [pid 5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5067] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5067] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5067] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5067] close(3) = 0 [pid 5067] mkdir("./file1", 0777) = 0 [pid 5067] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5067] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5067] chdir("./file1") = 0 [pid 5067] ioctl(4, LOOP_CLR_FD) = 0 [pid 5067] close(4) = 0 [pid 5067] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... futex resumed>) = 1 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5067] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... futex resumed>) = 1 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5067] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... futex resumed>) = 1 [pid 5067] ftruncate(5, 33587195) = 0 [pid 5067] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... futex resumed>) = 1 [ 65.013757][ T5067] loop0: detected capacity change from 0 to 4096 [ 65.024293][ T5067] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 65.039651][ T5067] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 65.055171][ T5067] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5067] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5066] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5068]}, 88) = 5068 [pid 5066] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5066] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5068 attached [pid 5068] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5068] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5068] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5068] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... futex resumed>) = 1 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5068] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... futex resumed>) = 1 [pid 5068] sendfile(6, 7, NULL, 281474978811909 [pid 5066] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5066] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5069]}, 88) = 5069 [pid 5066] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5066] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5069 attached [pid 5069] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5069] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5069] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5069] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5066] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... futex resumed>) = 1 [pid 5069] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5069] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... futex resumed>) = 0 [pid 5069] <... futex resumed>) = 1 [pid 5069] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] exit_group(0) = ? [pid 5069] <... futex resumed>) = ? [pid 5069] +++ exited with 0 +++ [pid 5067] <... sendfile resumed>) = ? [pid 5068] <... sendfile resumed>) = ? [pid 5067] +++ exited with 0 +++ [pid 5068] +++ exited with 0 +++ [pid 5066] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5070 ./strace-static-x86_64: Process 5070 attached [pid 5070] set_robust_list(0x555555cd6760, 24) = 0 [pid 5070] chdir("./10") = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5070] setpgid(0, 0) = 0 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1000", 4) = 4 [pid 5070] close(3) = 0 [ 65.389627][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5070] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5070] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5070] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5071 attached => {parent_tid=[5071]}, 88) = 5071 [pid 5070] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5071] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5071] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5071] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5071] <... futex resumed>) = 0 [pid 5070] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5071] memfd_create("syzkaller", 0) = 3 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5071] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5071] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5071] close(3) = 0 [pid 5071] mkdir("./file1", 0777) = 0 [pid 5071] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5071] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] chdir("./file1") = 0 [pid 5071] ioctl(4, LOOP_CLR_FD) = 0 [pid 5071] close(4) = 0 [pid 5071] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5071] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... futex resumed>) = 0 [pid 5070] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5070] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... futex resumed>) = 0 [pid 5071] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5071] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5070] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... futex resumed>) = 1 [pid 5071] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5071] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5070] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... futex resumed>) = 1 [pid 5071] ftruncate(5, 33587195) = 0 [pid 5071] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5070] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... futex resumed>) = 1 [ 65.509894][ T5071] loop0: detected capacity change from 0 to 4096 [ 65.521059][ T5071] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 65.535400][ T5071] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 65.550227][ T5071] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5071] sendfile(4, 5, NULL, 281474978811909 [pid 5070] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5070] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5072]}, 88) = 5072 [pid 5070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5070] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5072 attached [pid 5072] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5072] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5072] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5072] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5072] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5070] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... futex resumed>) = 1 [pid 5072] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5072] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5070] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... futex resumed>) = 1 [pid 5072] sendfile(6, 7, NULL, 281474978811909 [pid 5070] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5070] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5073]}, 88) = 5073 [pid 5070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5070] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5073 attached [pid 5073] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5073] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5073] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5073] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5070] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... futex resumed>) = 1 [pid 5073] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5073] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5073] <... futex resumed>) = 1 [pid 5073] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] exit_group(0 [pid 5073] <... futex resumed>) = ? [pid 5070] <... exit_group resumed>) = ? [pid 5073] +++ exited with 0 +++ [pid 5072] <... sendfile resumed>) = ? [pid 5072] +++ exited with 0 +++ [pid 5071] <... sendfile resumed>) = ? [pid 5071] +++ exited with 0 +++ [pid 5070] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=37 /* 0.37 s */} --- umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5074 ./strace-static-x86_64: Process 5074 attached [pid 5074] set_robust_list(0x555555cd6760, 24) = 0 [pid 5074] chdir("./11") = 0 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] setpgid(0, 0) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 65.873883][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5074] write(3, "1000", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5074] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5074] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5074] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5075 attached => {parent_tid=[5075]}, 88) = 5075 [pid 5074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5074] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5074] <... futex resumed>) = 0 [pid 5075] set_robust_list(0x7fd9ac9c59a0, 24 [pid 5074] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... set_robust_list resumed>) = 0 [pid 5075] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5075] memfd_create("syzkaller", 0) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5075] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5075] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5075] close(3) = 0 [pid 5075] mkdir("./file1", 0777) = 0 [pid 5075] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5075] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] chdir("./file1") = 0 [pid 5075] ioctl(4, LOOP_CLR_FD) = 0 [pid 5075] close(4) = 0 [pid 5075] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5074] <... futex resumed>) = 0 [pid 5074] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5075] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... futex resumed>) = 0 [pid 5074] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... futex resumed>) = 1 [pid 5075] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5075] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... futex resumed>) = 0 [pid 5074] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... futex resumed>) = 1 [pid 5075] ftruncate(5, 33587195) = 0 [pid 5075] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... futex resumed>) = 0 [pid 5074] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... futex resumed>) = 1 [ 65.981253][ T5075] loop0: detected capacity change from 0 to 4096 [ 65.991090][ T5075] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 66.005884][ T5075] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 66.018310][ T5075] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5075] sendfile(4, 5, NULL, 281474978811909 [pid 5074] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5074] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5074] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5074] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5074] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5076 attached => {parent_tid=[5076]}, 88) = 5076 [pid 5074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5074] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5076] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5076] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5076] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5074] <... futex resumed>) = 0 [pid 5074] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5076] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5074] <... futex resumed>) = 0 [pid 5074] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] sendfile(6, 7, NULL, 281474978811909 [pid 5074] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5074] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5074] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5077 attached => {parent_tid=[5077]}, 88) = 5077 [pid 5074] rt_sigprocmask(SIG_SETMASK, [], [pid 5077] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] <... rseq resumed>) = 0 [pid 5074] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5077] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5077] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5074] <... futex resumed>) = 0 [pid 5074] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5077] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... futex resumed>) = 0 [pid 5077] <... futex resumed>) = 1 [pid 5077] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] exit_group(0 [pid 5077] <... futex resumed>) = ? [pid 5074] <... exit_group resumed>) = ? [pid 5077] +++ exited with 0 +++ [pid 5076] <... sendfile resumed>) = ? [pid 5075] <... sendfile resumed>) = ? [pid 5076] +++ exited with 0 +++ [pid 5075] +++ exited with 0 +++ [pid 5074] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5078 ./strace-static-x86_64: Process 5078 attached [pid 5078] set_robust_list(0x555555cd6760, 24) = 0 [pid 5078] chdir("./12") = 0 [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] setpgid(0, 0) = 0 [pid 5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 66.345340][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5078] write(3, "1000", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5078] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5078] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5078] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5078] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5078] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5079]}, 88) = 5079 ./strace-static-x86_64: Process 5079 attached [pid 5078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5078] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5078] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5079] <... rseq resumed>) = 0 [pid 5079] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5079] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5079] memfd_create("syzkaller", 0) = 3 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5079] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5079] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5079] close(3) = 0 [pid 5079] mkdir("./file1", 0777) = 0 [pid 5079] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5079] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5079] chdir("./file1") = 0 [pid 5079] ioctl(4, LOOP_CLR_FD) = 0 [pid 5079] close(4) = 0 [pid 5079] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = 0 [pid 5078] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... futex resumed>) = 1 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5079] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5079] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... futex resumed>) = 0 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5078] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] <... open resumed>) = 5 [pid 5079] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5079] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5078] <... futex resumed>) = 0 [pid 5078] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5079] ftruncate(5, 33587195) = 0 [pid 5079] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5078] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 66.453673][ T5079] loop0: detected capacity change from 0 to 4096 [ 66.462906][ T5079] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 66.480617][ T5079] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 66.495864][ T5079] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5079] sendfile(4, 5, NULL, 281474978811909 [pid 5078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5078] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5078] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5078] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5080 attached => {parent_tid=[5080]}, 88) = 5080 [pid 5078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5078] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5080] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5080] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5080] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5080] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5080] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5078] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... open resumed>) = 7 [pid 5080] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5078] <... futex resumed>) = 0 [pid 5080] sendfile(6, 7, NULL, 281474978811909 [pid 5078] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5078] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5078] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5078] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5078] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5081]}, 88) = 5081 [pid 5078] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5078] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5081 attached [pid 5081] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5081] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5081] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5081] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = 0 [pid 5078] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... futex resumed>) = 1 [pid 5081] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5081] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5078] <... futex resumed>) = 0 [pid 5081] <... futex resumed>) = 1 [pid 5081] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] exit_group(0 [pid 5081] <... futex resumed>) = ? [pid 5078] <... exit_group resumed>) = ? [pid 5081] +++ exited with 0 +++ [pid 5079] <... sendfile resumed>) = ? [pid 5079] +++ exited with 0 +++ [pid 5080] <... sendfile resumed>) = ? [pid 5080] +++ exited with 0 +++ [pid 5078] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5078, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5082 ./strace-static-x86_64: Process 5082 attached [pid 5082] set_robust_list(0x555555cd6760, 24) = 0 [pid 5082] chdir("./13") = 0 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] setpgid(0, 0) = 0 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1000", 4) = 4 [ 66.846140][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5082] close(3) = 0 [pid 5082] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5082] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5082] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5082] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5083]}, 88) = 5083 ./strace-static-x86_64: Process 5083 attached [pid 5082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5083] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5082] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... rseq resumed>) = 0 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5083] memfd_create("syzkaller", 0) = 3 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5083] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5083] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5083] close(3) = 0 [pid 5083] mkdir("./file1", 0777) = 0 [pid 5083] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5083] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5083] chdir("./file1") = 0 [pid 5083] ioctl(4, LOOP_CLR_FD) = 0 [pid 5083] close(4) = 0 [pid 5083] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5082] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... open resumed>) = 4 [pid 5083] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... futex resumed>) = 1 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5083] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] <... futex resumed>) = 1 [pid 5082] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] ftruncate(5, 33587195) = 0 [pid 5083] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5083] sendfile(4, 5, NULL, 281474978811909 [pid 5082] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 66.953490][ T5083] loop0: detected capacity change from 0 to 4096 [ 66.963143][ T5083] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 66.978920][ T5083] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 66.994428][ T5083] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5082] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5082] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5082] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5082] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5084 attached => {parent_tid=[5084]}, 88) = 5084 [pid 5082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5084] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5082] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... rseq resumed>) = 0 [pid 5084] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5084] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5084] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5084] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] sendfile(6, 7, NULL, 281474978811909 [pid 5082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5082] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5082] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5082] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5082] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5085]}, 88) = 5085 [pid 5082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5082] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5085 attached [pid 5085] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5085] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5085] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5085] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5085] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5082] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5085] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5085] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] exit_group(0 [pid 5085] <... futex resumed>) = ? [pid 5082] <... exit_group resumed>) = ? [pid 5085] +++ exited with 0 +++ [pid 5084] <... sendfile resumed>) = ? [pid 5084] +++ exited with 0 +++ [pid 5083] <... sendfile resumed>) = ? [pid 5083] +++ exited with 0 +++ [pid 5082] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5086 ./strace-static-x86_64: Process 5086 attached [pid 5086] set_robust_list(0x555555cd6760, 24) = 0 [pid 5086] chdir("./14") = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 67.319973][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5086] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5086] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5086] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5087 attached => {parent_tid=[5087]}, 88) = 5087 [pid 5087] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5087] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5087] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5086] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5087] memfd_create("syzkaller", 0) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5087] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5087] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5087] close(3) = 0 [pid 5087] mkdir("./file1", 0777) = 0 [pid 5087] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5087] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5087] chdir("./file1") = 0 [pid 5087] ioctl(4, LOOP_CLR_FD) = 0 [pid 5087] close(4) = 0 [pid 5087] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5086] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... open resumed>) = 4 [pid 5087] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5086] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 1 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5087] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5086] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] ftruncate(5, 33587195 [pid 5086] <... futex resumed>) = 0 [pid 5087] <... ftruncate resumed>) = 0 [pid 5086] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] sendfile(4, 5, NULL, 281474978811909 [pid 5086] <... futex resumed>) = 0 [ 67.438673][ T5087] loop0: detected capacity change from 0 to 4096 [ 67.448237][ T5087] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 67.462262][ T5087] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 67.477501][ T5087] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5086] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5086] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5086] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5088]}, 88) = 5088 [pid 5086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5086] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5088 attached [pid 5088] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5088] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5088] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5088] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5086] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... futex resumed>) = 1 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5088] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5086] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... futex resumed>) = 1 [pid 5088] sendfile(6, 7, NULL, 281474978811909 [pid 5086] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5086] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5086] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5089]}, 88) = 5089 [pid 5086] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5086] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5089 attached [pid 5089] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5089] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5089] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5089] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5086] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5089] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] <... futex resumed>) = 0 [pid 5089] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] exit_group(0 [pid 5089] <... futex resumed>) = ? [pid 5086] <... exit_group resumed>) = ? [pid 5089] +++ exited with 0 +++ [pid 5088] <... sendfile resumed>) = ? [pid 5088] +++ exited with 0 +++ [pid 5087] <... sendfile resumed>) = ? [pid 5087] +++ exited with 0 +++ [pid 5086] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=44 /* 0.44 s */} --- umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5090 ./strace-static-x86_64: Process 5090 attached [pid 5090] set_robust_list(0x555555cd6760, 24) = 0 [pid 5090] chdir("./15") = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1000", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5090] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 67.832490][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5090] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5090] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5090] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5091 attached => {parent_tid=[5091]}, 88) = 5091 [pid 5091] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], [pid 5091] set_robust_list(0x7fd9ac9c59a0, 24 [pid 5090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5090] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5091] memfd_create("syzkaller", 0) = 3 [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5091] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5091] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5091] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5091] close(3) = 0 [pid 5091] mkdir("./file1", 0777) = 0 [pid 5091] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5091] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5091] chdir("./file1") = 0 [pid 5091] ioctl(4, LOOP_CLR_FD) = 0 [pid 5091] close(4) = 0 [pid 5091] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5091] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5091] <... futex resumed>) = 0 [pid 5091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5090] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... open resumed>) = 4 [pid 5091] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... futex resumed>) = 0 [pid 5091] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5091] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5091] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5091] <... futex resumed>) = 0 [pid 5090] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] ftruncate(5, 33587195) = 0 [pid 5091] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... futex resumed>) = 0 [ 67.937528][ T5091] loop0: detected capacity change from 0 to 4096 [ 67.946882][ T5091] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 67.962731][ T5091] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 67.978807][ T5091] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5091] sendfile(4, 5, NULL, 281474978811909 [pid 5090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5090] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5090] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5092 attached [pid 5092] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5090] <... clone3 resumed> => {parent_tid=[5092]}, 88) = 5092 [pid 5092] <... rseq resumed>) = 0 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], [pid 5092] set_robust_list(0x7fd9a47a49a0, 24 [pid 5090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5090] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] rt_sigprocmask(SIG_SETMASK, [], [pid 5090] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5092] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5092] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] sendfile(6, 7, NULL, 281474978811909 [pid 5090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5090] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5093]}, 88) = 5093 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5093 attached [pid 5090] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5090] <... futex resumed>) = 0 [pid 5093] <... rseq resumed>) = 0 [pid 5090] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5093] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5093] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5090] <... futex resumed>) = 0 [pid 5090] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] <... fallocate resumed>) = 0 [pid 5093] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [pid 5093] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] exit_group(0 [pid 5093] <... futex resumed>) = ? [pid 5090] <... exit_group resumed>) = ? [pid 5092] <... sendfile resumed>) = ? [pid 5093] +++ exited with 0 +++ [pid 5092] +++ exited with 0 +++ [pid 5091] <... sendfile resumed>) = ? [pid 5091] +++ exited with 0 +++ [pid 5090] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=43 /* 0.43 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5094 attached [pid 5094] set_robust_list(0x555555cd6760, 24) = 0 [pid 5094] chdir("./16") = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x555555cd6750) = 5094 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5094] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5094] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5094] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5094] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 68.316139][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5094] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5095 attached [pid 5095] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5095] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5095] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] <... clone3 resumed> => {parent_tid=[5095]}, 88) = 5095 [pid 5094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5094] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] <... futex resumed>) = 0 [pid 5094] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5095] memfd_create("syzkaller", 0) = 3 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5095] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5095] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5095] close(3) = 0 [pid 5095] mkdir("./file1", 0777) = 0 [pid 5095] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5095] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5095] chdir("./file1") = 0 [pid 5095] ioctl(4, LOOP_CLR_FD) = 0 [pid 5095] close(4) = 0 [pid 5095] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5094] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... futex resumed>) = 1 [pid 5095] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5095] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5094] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... futex resumed>) = 1 [pid 5095] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5095] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5094] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... futex resumed>) = 1 [pid 5095] ftruncate(5, 33587195) = 0 [pid 5095] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5094] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... futex resumed>) = 1 [ 68.417192][ T5095] loop0: detected capacity change from 0 to 4096 [ 68.426087][ T5095] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 68.440246][ T5095] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 68.455584][ T5095] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5095] sendfile(4, 5, NULL, 281474978811909 [pid 5094] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5094] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5094] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5094] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5094] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5096]}, 88) = 5096 [pid 5094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5094] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5096 attached [pid 5096] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5096] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5096] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5096] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5096] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5094] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... futex resumed>) = 1 [pid 5096] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5096] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5094] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] <... futex resumed>) = 1 [pid 5096] sendfile(6, 7, NULL, 281474978811909 [pid 5094] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5094] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5094] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5094] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5094] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5094] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5094] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5097 attached => {parent_tid=[5097]}, 88) = 5097 [pid 5094] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5097] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5094] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] <... rseq resumed>) = 0 [pid 5097] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5097] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5097] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5097] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5094] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5097] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5097] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5097] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] exit_group(0 [pid 5097] <... futex resumed>) = ? [pid 5094] <... exit_group resumed>) = ? [pid 5097] +++ exited with 0 +++ [pid 5095] <... sendfile resumed>) = ? [pid 5095] +++ exited with 0 +++ [pid 5096] <... sendfile resumed>) = ? [pid 5096] +++ exited with 0 +++ [pid 5094] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=0, si_stime=45 /* 0.45 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5098 ./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x555555cd6760, 24) = 0 [ 68.766193][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5098] chdir("./17") = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5098] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5098] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5098] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5098] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5099]}, 88) = 5099 ./strace-static-x86_64: Process 5099 attached [pid 5099] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5099] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5098] rt_sigprocmask(SIG_SETMASK, [], [pid 5099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5099] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5098] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 1 [pid 5098] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5099] memfd_create("syzkaller", 0) = 3 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5099] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5099] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5099] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5099] close(3) = 0 [pid 5099] mkdir("./file1", 0777) = 0 [pid 5099] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5099] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5099] chdir("./file1") = 0 [pid 5099] ioctl(4, LOOP_CLR_FD) = 0 [pid 5099] close(4) = 0 [pid 5099] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5098] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... futex resumed>) = 0 [pid 5099] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5099] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... futex resumed>) = 1 [pid 5099] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5099] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... futex resumed>) = 1 [pid 5099] ftruncate(5, 33587195) = 0 [pid 5099] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... futex resumed>) = 1 [ 68.889217][ T5099] loop0: detected capacity change from 0 to 4096 [ 68.899547][ T5099] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 68.912789][ T5099] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 68.925069][ T5099] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5099] sendfile(4, 5, NULL, 281474978811909 [pid 5098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5098] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5098] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5098] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5098] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5098] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5100]}, 88) = 5100 [pid 5098] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5098] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5100 attached [pid 5100] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5100] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5100] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5100] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 1 [pid 5100] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5100] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] <... futex resumed>) = 1 [pid 5100] sendfile(6, 7, NULL, 281474978811909 [pid 5098] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5098] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5098] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5098] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5098] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5101]}, 88) = 5101 [pid 5098] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5101 attached NULL, 8) = 0 [pid 5098] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5101] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5101] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5101] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5101] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5098] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5101] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5101] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] exit_group(0 [pid 5101] <... futex resumed>) = ? [pid 5098] <... exit_group resumed>) = ? [pid 5101] +++ exited with 0 +++ [pid 5099] <... sendfile resumed>) = ? [pid 5099] +++ exited with 0 +++ [pid 5100] <... sendfile resumed>) = ? [pid 5100] +++ exited with 0 +++ [pid 5098] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=0, si_stime=42 /* 0.42 s */} --- umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5102 attached [pid 5102] set_robust_list(0x555555cd6760, 24) = 0 [pid 5102] chdir("./18" [pid 5028] <... clone resumed>, child_tidptr=0x555555cd6750) = 5102 [pid 5102] <... chdir resumed>) = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5102] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5102] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5102] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5102] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5103]}, 88) = 5103 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5102] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5103 attached [pid 5103] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5103] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5103] memfd_create("syzkaller", 0) = 3 [pid 5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 69.282548][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5103] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5103] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5103] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5103] close(3) = 0 [pid 5103] mkdir("./file1", 0777) = 0 [pid 5103] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5103] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5103] chdir("./file1") = 0 [pid 5103] ioctl(4, LOOP_CLR_FD) = 0 [pid 5103] close(4) = 0 [pid 5103] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] <... futex resumed>) = 0 [pid 5102] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5103] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] <... futex resumed>) = 0 [pid 5102] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5103] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] <... futex resumed>) = 0 [pid 5102] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 69.383531][ T5103] loop0: detected capacity change from 0 to 4096 [ 69.394295][ T5103] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 69.409312][ T5103] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 69.425413][ T5103] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5103] ftruncate(5, 33587195) = 0 [pid 5103] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] <... futex resumed>) = 0 [pid 5102] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] sendfile(4, 5, NULL, 281474978811909 [pid 5102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5102] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5102] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5102] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5104]}, 88) = 5104 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5102] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5104 attached [pid 5104] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5104] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5104] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = 0 [pid 5102] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5104] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = 0 [pid 5102] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 1 [pid 5104] sendfile(6, 7, NULL, 281474978811909 [pid 5102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5102] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5102] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5102] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5102] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5105]}, 88) = 5105 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5102] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5105 attached [pid 5105] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5105] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5105] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5105] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5105] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = 0 [pid 5102] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5105] <... futex resumed>) = 1 [pid 5105] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5105] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = 0 [pid 5105] <... futex resumed>) = 1 [pid 5105] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] exit_group(0 [pid 5105] <... futex resumed>) = ? [pid 5102] <... exit_group resumed>) = ? [pid 5105] +++ exited with 0 +++ [pid 5103] <... sendfile resumed>) = ? [pid 5103] +++ exited with 0 +++ [pid 5104] <... sendfile resumed>) = ? [pid 5104] +++ exited with 0 +++ [pid 5102] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5106 attached , child_tidptr=0x555555cd6750) = 5106 [pid 5106] set_robust_list(0x555555cd6760, 24) = 0 [pid 5106] chdir("./19") = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5106] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5106] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5106] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [ 69.752310][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5107]}, 88) = 5107 [pid 5106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5107 attached [pid 5107] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5107] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5107] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = 0 [pid 5106] <... futex resumed>) = 1 [pid 5106] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5107] memfd_create("syzkaller", 0) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5107] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5107] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5107] close(3) = 0 [pid 5107] mkdir("./file1", 0777) = 0 [pid 5107] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5107] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5107] chdir("./file1") = 0 [pid 5107] ioctl(4, LOOP_CLR_FD) = 0 [pid 5107] close(4) = 0 [pid 5107] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... futex resumed>) = 1 [pid 5107] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5107] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... futex resumed>) = 1 [pid 5107] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5107] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... futex resumed>) = 1 [pid 5107] ftruncate(5, 33587195) = 0 [pid 5107] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... futex resumed>) = 1 [ 69.857509][ T5107] loop0: detected capacity change from 0 to 4096 [ 69.868217][ T5107] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 69.883042][ T5107] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 69.898044][ T5107] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5107] sendfile(4, 5, NULL, 281474978811909 [pid 5106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5106] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5108 attached => {parent_tid=[5108]}, 88) = 5108 [pid 5108] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5108] <... rseq resumed>) = 0 [pid 5108] set_robust_list(0x7fd9a47a49a0, 24 [pid 5106] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] <... set_robust_list resumed>) = 0 [pid 5106] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5108] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5108] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5108] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 0 [pid 5108] <... futex resumed>) = 1 [pid 5106] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] sendfile(6, 7, NULL, 281474978811909 [pid 5106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5106] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5109]}, 88) = 5109 ./strace-static-x86_64: Process 5109 attached [pid 5109] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5109] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5109] rt_sigprocmask(SIG_SETMASK, [], [pid 5106] rt_sigprocmask(SIG_SETMASK, [], [pid 5109] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5109] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5106] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = 0 [pid 5106] <... futex resumed>) = 1 [pid 5106] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5109] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = 0 [pid 5106] <... futex resumed>) = 1 [pid 5109] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5106] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... fallocate resumed>) = 0 [pid 5109] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = 1 [pid 5109] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] exit_group(0 [pid 5109] <... futex resumed>) = ? [pid 5106] <... exit_group resumed>) = ? [pid 5109] +++ exited with 0 +++ [pid 5107] <... sendfile resumed>) = ? [pid 5108] <... sendfile resumed>) = ? [pid 5108] +++ exited with 0 +++ [pid 5107] +++ exited with 0 +++ [pid 5106] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=0, si_stime=40 /* 0.40 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5110 attached [pid 5110] set_robust_list(0x555555cd6760, 24) = 0 [pid 5110] chdir("./20") = 0 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5110] setpgid(0, 0) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5110] write(3, "1000", 4) = 4 [pid 5110] close(3) = 0 [pid 5110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5110] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5110] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5110] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5110] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5110] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5111]}, 88) = 5111 [pid 5110] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5110] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5111 attached [pid 5111] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5111] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5111] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 70.231517][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5111] memfd_create("syzkaller", 0 [pid 5028] <... clone resumed>, child_tidptr=0x555555cd6750) = 5110 [pid 5111] <... memfd_create resumed>) = 3 [pid 5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5111] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5111] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5111] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5111] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5111] close(3) = 0 [pid 5111] mkdir("./file1", 0777) = 0 [pid 5111] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5111] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5111] chdir("./file1") = 0 [pid 5111] ioctl(4, LOOP_CLR_FD) = 0 [pid 5111] close(4) = 0 [pid 5111] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5110] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5111] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5110] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 70.327581][ T5111] loop0: detected capacity change from 0 to 4096 [ 70.338168][ T5111] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 70.353962][ T5111] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 70.370342][ T5111] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5111] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5110] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] ftruncate(5, 33587195) = 0 [pid 5111] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5110] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] sendfile(4, 5, NULL, 281474978811909 [pid 5110] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5110] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5110] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5110] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5110] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5112 attached => {parent_tid=[5112]}, 88) = 5112 [pid 5112] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5112] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5112] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5110] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5110] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5112] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] <... futex resumed>) = 0 [pid 5110] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] <... futex resumed>) = 0 [pid 5112] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5112] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5110] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = 0 [pid 5110] <... futex resumed>) = 1 [pid 5112] sendfile(6, 7, NULL, 281474978811909 [pid 5110] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5110] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5110] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5110] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5110] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5113 attached => {parent_tid=[5113]}, 88) = 5113 [pid 5113] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5110] rt_sigprocmask(SIG_SETMASK, [], [pid 5113] <... rseq resumed>) = 0 [pid 5113] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5113] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5110] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5113] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = 0 [pid 5110] <... futex resumed>) = 1 [pid 5113] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5110] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... open resumed>) = 8 [pid 5113] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = 0 [pid 5110] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... futex resumed>) = 1 [pid 5113] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5113] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = 0 [pid 5113] <... futex resumed>) = 1 [pid 5113] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] exit_group(0 [pid 5113] <... futex resumed>) = ? [pid 5110] <... exit_group resumed>) = ? [pid 5113] +++ exited with 0 +++ [pid 5111] <... sendfile resumed>) = ? [pid 5111] +++ exited with 0 +++ [pid 5112] <... sendfile resumed>) = ? [pid 5112] +++ exited with 0 +++ [pid 5110] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 70.693876][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5114 attached [pid 5114] set_robust_list(0x555555cd6760, 24) = 0 [pid 5114] chdir("./21") = 0 [pid 5114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5114] setpgid(0, 0) = 0 [pid 5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5028] <... clone resumed>, child_tidptr=0x555555cd6750) = 5114 [pid 5114] write(3, "1000", 4) = 4 [pid 5114] close(3) = 0 [pid 5114] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5114] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5114] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5114] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5114] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5115]}, 88) = 5115 [pid 5114] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5114] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5115 attached [pid 5115] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5115] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5115] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5115] memfd_create("syzkaller", 0) = 3 [pid 5115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5115] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5115] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5115] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5115] close(3) = 0 [pid 5115] mkdir("./file1", 0777) = 0 [pid 5115] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5115] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5115] chdir("./file1") = 0 [pid 5115] ioctl(4, LOOP_CLR_FD) = 0 [pid 5115] close(4) = 0 [pid 5115] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5114] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] <... futex resumed>) = 1 [pid 5115] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5115] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5114] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] <... futex resumed>) = 1 [pid 5115] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5115] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5114] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] <... futex resumed>) = 1 [pid 5115] ftruncate(5, 33587195) = 0 [pid 5115] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5114] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] <... futex resumed>) = 1 [ 70.803417][ T5115] loop0: detected capacity change from 0 to 4096 [ 70.812800][ T5115] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 70.826259][ T5115] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 70.838436][ T5115] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5115] sendfile(4, 5, NULL, 281474978811909 [pid 5114] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5114] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5114] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5114] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5116]}, 88) = 5116 [pid 5114] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5114] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5116 attached [pid 5116] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5116] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5116] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5116] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5114] <... futex resumed>) = 0 [pid 5114] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5116] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5114] <... futex resumed>) = 0 [pid 5114] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] sendfile(6, 7, NULL, 281474978811909 [pid 5114] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5114] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5114] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5114] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5117]}, 88) = 5117 [pid 5114] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5114] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5117 attached [pid 5117] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5117] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5117] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5117] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5117] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = 0 [pid 5114] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] <... futex resumed>) = 1 [pid 5117] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5117] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5114] <... futex resumed>) = 0 [pid 5117] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5114] exit_group(0) = ? [pid 5117] <... futex resumed>) = ? [pid 5117] +++ exited with 0 +++ [pid 5115] <... sendfile resumed>) = ? [pid 5116] <... sendfile resumed>) = ? [pid 5115] +++ exited with 0 +++ [pid 5116] +++ exited with 0 +++ [pid 5114] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5114, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5118 ./strace-static-x86_64: Process 5118 attached [pid 5118] set_robust_list(0x555555cd6760, 24) = 0 [pid 5118] chdir("./22") = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] setpgid(0, 0) = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [ 71.176990][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5118] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5118] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5119 attached => {parent_tid=[5119]}, 88) = 5119 [pid 5119] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5119] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5119] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5119] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5118] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5118] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5119] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5119] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5119] close(3) = 0 [pid 5119] mkdir("./file1", 0777) = 0 [pid 5119] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5119] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file1") = 0 [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [pid 5119] close(4) = 0 [pid 5119] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5118] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... open resumed>) = 4 [pid 5119] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5118] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... open resumed>) = 5 [pid 5119] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5119] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5119] ftruncate(5, 33587195 [pid 5118] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... ftruncate resumed>) = 0 [pid 5119] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5119] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] <... futex resumed>) = 0 [pid 5119] sendfile(4, 5, NULL, 281474978811909 [ 71.300309][ T5119] loop0: detected capacity change from 0 to 4096 [ 71.311172][ T5119] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 71.326178][ T5119] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 71.341205][ T5119] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5118] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5118] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5118] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5120]}, 88) = 5120 [pid 5118] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5118] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5120 attached [pid 5120] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5120] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5120] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5120] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5120] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... futex resumed>) = 1 [pid 5120] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5120] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... futex resumed>) = 1 [pid 5120] sendfile(6, 7, NULL, 281474978811909 [pid 5118] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5118] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5118] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5121 attached [pid 5121] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5121] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5121] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5121] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... clone3 resumed> => {parent_tid=[5121]}, 88) = 5121 [pid 5118] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5118] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5121] <... futex resumed>) = 0 [pid 5121] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5118] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] <... open resumed>) = 8 [pid 5121] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5121] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5118] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] <... fallocate resumed>) = 0 [pid 5121] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 1 [pid 5121] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] exit_group(0 [pid 5121] <... futex resumed>) = ? [pid 5118] <... exit_group resumed>) = ? [pid 5121] +++ exited with 0 +++ [pid 5119] <... sendfile resumed>) = ? [pid 5120] <... sendfile resumed>) = ? [pid 5119] +++ exited with 0 +++ [pid 5120] +++ exited with 0 +++ [pid 5118] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5122 attached [pid 5122] set_robust_list(0x555555cd6760, 24) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x555555cd6750) = 5122 [pid 5122] chdir("./23") = 0 [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5122] setpgid(0, 0) = 0 [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 71.681024][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5122] write(3, "1000", 4) = 4 [pid 5122] close(3) = 0 [pid 5122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5122] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5122] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5122] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5122] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5122] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5123 attached [pid 5123] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5123] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5123] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5123] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] <... clone3 resumed> => {parent_tid=[5123]}, 88) = 5123 [pid 5122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5122] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5122] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5123] memfd_create("syzkaller", 0) = 3 [pid 5123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5123] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5123] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5123] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5123] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5123] close(3) = 0 [pid 5123] mkdir("./file1", 0777) = 0 [pid 5123] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5123] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5123] chdir("./file1") = 0 [pid 5123] ioctl(4, LOOP_CLR_FD) = 0 [pid 5123] close(4) = 0 [pid 5123] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5123] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] <... futex resumed>) = 0 [pid 5123] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5122] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5123] <... open resumed>) = 4 [pid 5123] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5123] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] <... futex resumed>) = 0 [pid 5123] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5122] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5123] <... open resumed>) = 5 [pid 5123] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5123] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] <... futex resumed>) = 0 [pid 5123] ftruncate(5, 33587195 [pid 5122] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5123] <... ftruncate resumed>) = 0 [pid 5123] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5123] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] <... futex resumed>) = 0 [pid 5123] sendfile(4, 5, NULL, 281474978811909 [ 71.791415][ T5123] loop0: detected capacity change from 0 to 4096 [ 71.801117][ T5123] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 71.815667][ T5123] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 71.829932][ T5123] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5122] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5122] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5122] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5122] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5122] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5124]}, 88) = 5124 [pid 5122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5122] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5124 attached [pid 5124] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5124] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5124] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5124] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = 0 [pid 5122] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 1 [pid 5124] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5124] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = 0 [pid 5122] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 1 [pid 5124] sendfile(6, 7, NULL, 281474978811909 [pid 5122] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5122] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5122] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5122] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5122] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5125 attached [pid 5125] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5122] <... clone3 resumed> => {parent_tid=[5125]}, 88) = 5125 [pid 5125] <... rseq resumed>) = 0 [pid 5125] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5125] rt_sigprocmask(SIG_SETMASK, [], [pid 5122] rt_sigprocmask(SIG_SETMASK, [], [pid 5125] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5125] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5122] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 1 [pid 5125] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5122] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... open resumed>) = 8 [pid 5125] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5125] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5122] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... fallocate resumed>) = 0 [pid 5125] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = 0 [pid 5125] <... futex resumed>) = 1 [pid 5125] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] exit_group(0 [pid 5125] <... futex resumed>) = ? [pid 5122] <... exit_group resumed>) = ? [pid 5125] +++ exited with 0 +++ [pid 5124] <... sendfile resumed>) = ? [pid 5123] <... sendfile resumed>) = ? [pid 5124] +++ exited with 0 +++ [pid 5123] +++ exited with 0 +++ [pid 5122] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5126 ./strace-static-x86_64: Process 5126 attached [pid 5126] set_robust_list(0x555555cd6760, 24) = 0 [pid 5126] chdir("./24") = 0 [pid 5126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5126] setpgid(0, 0) = 0 [pid 5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5126] write(3, "1000", 4) = 4 [pid 5126] close(3) = 0 [pid 5126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5126] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5126] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5126] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5126] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5127]}, 88) = 5127 [pid 5126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5126] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5127 attached [pid 5127] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5127] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5127] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5127] memfd_create("syzkaller", 0) = 3 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 72.167939][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5127] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5127] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5127] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5127] close(3) = 0 [pid 5127] mkdir("./file1", 0777) = 0 [pid 5127] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5127] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5127] chdir("./file1") = 0 [pid 5127] ioctl(4, LOOP_CLR_FD) = 0 [pid 5127] close(4) = 0 [pid 5127] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5126] <... futex resumed>) = 0 [pid 5127] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5126] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... open resumed>) = 4 [pid 5127] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5126] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... futex resumed>) = 1 [pid 5127] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5127] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5126] <... futex resumed>) = 0 [pid 5127] ftruncate(5, 33587195 [pid 5126] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... ftruncate resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [pid 5127] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... futex resumed>) = 0 [pid 5126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5127] sendfile(4, 5, NULL, 281474978811909 [pid 5126] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 72.265434][ T5127] loop0: detected capacity change from 0 to 4096 [ 72.275436][ T5127] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 72.290003][ T5127] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 72.304479][ T5127] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5126] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5126] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5126] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5126] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5128]}, 88) = 5128 [pid 5126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5126] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5128 attached [pid 5128] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5128] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5128] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5128] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5126] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... futex resumed>) = 1 [pid 5128] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5128] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5126] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... futex resumed>) = 1 [pid 5128] sendfile(6, 7, NULL, 281474978811909 [pid 5126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5126] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5126] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5126] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5129]}, 88) = 5129 [pid 5126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5126] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5129 attached [pid 5129] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5129] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5129] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5129] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5126] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5129] <... futex resumed>) = 1 [pid 5129] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5129] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5126] <... futex resumed>) = 0 [pid 5129] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5126] exit_group(0) = ? [pid 5129] <... futex resumed>) = ? [pid 5129] +++ exited with 0 +++ [pid 5127] <... sendfile resumed>) = ? [pid 5128] <... sendfile resumed>) = ? [pid 5127] +++ exited with 0 +++ [pid 5128] +++ exited with 0 +++ [pid 5126] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5126, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5130 ./strace-static-x86_64: Process 5130 attached [pid 5130] set_robust_list(0x555555cd6760, 24) = 0 [pid 5130] chdir("./25") = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] setpgid(0, 0) = 0 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5130] write(3, "1000", 4) = 4 [pid 5130] close(3) = 0 [pid 5130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5130] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5130] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5130] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5131]}, 88) = 5131 [pid 5130] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5130] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5131 attached [pid 5131] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5131] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5131] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5131] memfd_create("syzkaller", 0) = 3 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 72.603763][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5131] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5131] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5131] close(3) = 0 [pid 5131] mkdir("./file1", 0777) = 0 [pid 5131] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5131] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5131] chdir("./file1") = 0 [pid 5131] ioctl(4, LOOP_CLR_FD) = 0 [pid 5131] close(4) = 0 [pid 5131] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5130] <... futex resumed>) = 0 [pid 5131] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5130] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] <... open resumed>) = 4 [pid 5131] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = 0 [pid 5130] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] <... futex resumed>) = 1 [pid 5131] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5131] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = 0 [pid 5130] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] <... futex resumed>) = 1 [pid 5131] ftruncate(5, 33587195) = 0 [pid 5131] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 1 [pid 5130] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] sendfile(4, 5, NULL, 281474978811909 [pid 5130] <... futex resumed>) = 0 [ 72.694665][ T5131] loop0: detected capacity change from 0 to 4096 [ 72.705674][ T5131] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 72.719450][ T5131] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 72.734163][ T5131] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5130] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5130] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5130] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5132 attached => {parent_tid=[5132]}, 88) = 5132 [pid 5132] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5130] rt_sigprocmask(SIG_SETMASK, [], [pid 5132] <... rseq resumed>) = 0 [pid 5130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5132] set_robust_list(0x7fd9a47a49a0, 24 [pid 5130] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] <... set_robust_list resumed>) = 0 [pid 5130] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5132] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5132] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = 1 [pid 5132] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5130] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] <... open resumed>) = 7 [pid 5132] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5130] <... futex resumed>) = 0 [pid 5130] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] sendfile(6, 7, NULL, 281474978811909 [pid 5130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5130] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5130] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5133]}, 88) = 5133 [pid 5130] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5133 attached [pid 5133] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5133] <... rseq resumed>) = 0 [pid 5133] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5133] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5130] <... futex resumed>) = 1 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5130] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] <... open resumed>) = 8 [pid 5133] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5130] <... futex resumed>) = 0 [pid 5130] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5133] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = 0 [pid 5133] <... futex resumed>) = 1 [pid 5133] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] exit_group(0 [pid 5133] <... futex resumed>) = ? [pid 5130] <... exit_group resumed>) = ? [pid 5133] +++ exited with 0 +++ [pid 5131] <... sendfile resumed>) = ? [pid 5131] +++ exited with 0 +++ [pid 5132] <... sendfile resumed>) = ? [pid 5132] +++ exited with 0 +++ [pid 5130] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5134 ./strace-static-x86_64: Process 5134 attached [pid 5134] set_robust_list(0x555555cd6760, 24) = 0 [pid 5134] chdir("./26") = 0 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5134] setpgid(0, 0) = 0 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5134] write(3, "1000", 4) = 4 [pid 5134] close(3) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5134] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5134] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5134] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5134] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5134] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5135]}, 88) = 5135 ./strace-static-x86_64: Process 5135 attached [pid 5135] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5135] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5135] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5135] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5134] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5134] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5135] memfd_create("syzkaller", 0) = 3 [pid 5135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 73.093371][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5135] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5135] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5135] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5135] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5135] close(3) = 0 [pid 5135] mkdir("./file1", 0777) = 0 [pid 5135] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5135] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5135] chdir("./file1") = 0 [pid 5135] ioctl(4, LOOP_CLR_FD) = 0 [pid 5135] close(4) = 0 [pid 5135] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 1 [pid 5134] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5134] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... open resumed>) = 4 [pid 5135] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 1 [pid 5135] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5135] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 1 [pid 5135] ftruncate(5, 33587195) = 0 [pid 5135] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 1 [ 73.187712][ T5135] loop0: detected capacity change from 0 to 4096 [ 73.197404][ T5135] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 73.211640][ T5135] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 73.227209][ T5135] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5135] sendfile(4, 5, NULL, 281474978811909 [pid 5134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5134] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5134] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5134] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5134] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5136]}, 88) = 5136 ./strace-static-x86_64: Process 5136 attached [pid 5134] rt_sigprocmask(SIG_SETMASK, [], [pid 5136] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5136] <... rseq resumed>) = 0 [pid 5134] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] set_robust_list(0x7fd9a47a49a0, 24 [pid 5134] <... futex resumed>) = 0 [pid 5136] <... set_robust_list resumed>) = 0 [pid 5134] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5136] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5136] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5136] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] sendfile(6, 7, NULL, 281474978811909 [pid 5134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5134] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5134] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5134] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5134] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5134] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5137]}, 88) = 5137 ./strace-static-x86_64: Process 5137 attached [pid 5134] rt_sigprocmask(SIG_SETMASK, [], [pid 5137] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5134] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... rseq resumed>) = 0 [pid 5137] set_robust_list(0x7fd9a47839a0, 24 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... set_robust_list resumed>) = 0 [pid 5137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5137] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5137] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5137] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5137] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] exit_group(0 [pid 5137] <... futex resumed>) = ? [pid 5134] <... exit_group resumed>) = ? [pid 5136] <... sendfile resumed>) = ? [pid 5135] <... sendfile resumed>) = ? [pid 5137] +++ exited with 0 +++ [pid 5135] +++ exited with 0 +++ [pid 5136] +++ exited with 0 +++ [pid 5134] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5138 ./strace-static-x86_64: Process 5138 attached [pid 5138] set_robust_list(0x555555cd6760, 24) = 0 [pid 5138] chdir("./27") = 0 [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5138] setpgid(0, 0) = 0 [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5138] write(3, "1000", 4) = 4 [pid 5138] close(3) = 0 [pid 5138] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5138] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5138] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5138] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5138] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5139]}, 88) = 5139 ./strace-static-x86_64: Process 5139 attached [pid 5138] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 73.560870][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5139] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5138] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5139] <... rseq resumed>) = 0 [pid 5139] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5139] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5139] memfd_create("syzkaller", 0) = 3 [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5139] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5139] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5139] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5139] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5139] close(3) = 0 [pid 5139] mkdir("./file1", 0777) = 0 [pid 5139] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5139] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5139] chdir("./file1") = 0 [pid 5139] ioctl(4, LOOP_CLR_FD) = 0 [pid 5139] close(4) = 0 [pid 5139] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5139] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 0 [pid 5139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5138] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] <... open resumed>) = 4 [pid 5139] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5139] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] ftruncate(5, 33587195) = 0 [pid 5139] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 73.659925][ T5139] loop0: detected capacity change from 0 to 4096 [ 73.670394][ T5139] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 73.685415][ T5139] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 73.700452][ T5139] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5139] sendfile(4, 5, NULL, 281474978811909 [pid 5138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5138] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5138] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5138] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5140 attached => {parent_tid=[5140]}, 88) = 5140 [pid 5140] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5140] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5140] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5140] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5138] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5138] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5140] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5138] <... futex resumed>) = 0 [pid 5140] <... open resumed>) = 7 [pid 5138] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5140] sendfile(6, 7, NULL, 281474978811909 [pid 5138] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5138] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5138] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5138] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5138] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5141]}, 88) = 5141 [pid 5138] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5138] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5141 attached [pid 5141] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5141] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5141] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5141] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5141] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5141] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] exit_group(0 [pid 5141] <... futex resumed>) = ? [pid 5138] <... exit_group resumed>) = ? [pid 5141] +++ exited with 0 +++ [pid 5140] <... sendfile resumed>) = ? [pid 5139] <... sendfile resumed>) = ? [pid 5140] +++ exited with 0 +++ [pid 5139] +++ exited with 0 +++ [pid 5138] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5138, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5142 ./strace-static-x86_64: Process 5142 attached [pid 5142] set_robust_list(0x555555cd6760, 24) = 0 [pid 5142] chdir("./28") = 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] setpgid(0, 0) = 0 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5142] write(3, "1000", 4) = 4 [pid 5142] close(3) = 0 [pid 5142] symlink("/dev/binderfs", "./binderfs") = 0 [ 74.023154][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5142] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5142] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5142] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5142] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5143]}, 88) = 5143 [pid 5142] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5142] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5143 attached [pid 5143] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5143] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5143] memfd_create("syzkaller", 0) = 3 [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5143] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5143] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5143] close(3) = 0 [pid 5143] mkdir("./file1", 0777) = 0 [pid 5143] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5143] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5143] chdir("./file1") = 0 [pid 5143] ioctl(4, LOOP_CLR_FD) = 0 [pid 5143] close(4) = 0 [pid 5143] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5142] <... futex resumed>) = 0 [pid 5143] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5142] <... futex resumed>) = 0 [pid 5143] <... open resumed>) = 4 [pid 5142] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] <... futex resumed>) = 0 [pid 5142] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5142] <... futex resumed>) = 0 [pid 5143] <... open resumed>) = 5 [pid 5143] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... futex resumed>) = 0 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 74.126926][ T5143] loop0: detected capacity change from 0 to 4096 [ 74.136834][ T5143] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 74.151651][ T5143] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 74.166409][ T5143] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5143] ftruncate(5, 33587195 [pid 5142] <... futex resumed>) = 0 [pid 5143] <... ftruncate resumed>) = 0 [pid 5142] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] <... futex resumed>) = 0 [pid 5142] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] sendfile(4, 5, NULL, 281474978811909 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5142] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5142] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5142] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5144]}, 88) = 5144 [pid 5142] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5142] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5144 attached [pid 5144] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5144] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5144] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5144] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... futex resumed>) = 1 [pid 5144] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5144] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... futex resumed>) = 1 [pid 5144] sendfile(6, 7, NULL, 281474978811909 [pid 5142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5142] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5142] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5142] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5145]}, 88) = 5145 [pid 5142] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5142] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5145 attached [pid 5145] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5145] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5145] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5145] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5145] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5142] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... futex resumed>) = 1 [pid 5145] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5145] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] <... futex resumed>) = 0 [pid 5145] <... futex resumed>) = 1 [pid 5145] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] exit_group(0 [pid 5145] <... futex resumed>) = ? [pid 5142] <... exit_group resumed>) = ? [pid 5145] +++ exited with 0 +++ [pid 5144] <... sendfile resumed>) = ? [pid 5144] +++ exited with 0 +++ [pid 5143] <... sendfile resumed>) = ? [pid 5143] +++ exited with 0 +++ [pid 5142] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=39 /* 0.39 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5146 ./strace-static-x86_64: Process 5146 attached [pid 5146] set_robust_list(0x555555cd6760, 24) = 0 [pid 5146] chdir("./29") = 0 [pid 5146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5146] setpgid(0, 0) = 0 [pid 5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5146] write(3, "1000", 4) = 4 [ 74.515149][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5146] close(3) = 0 [pid 5146] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5146] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5146] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5146] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5147 attached => {parent_tid=[5147]}, 88) = 5147 [pid 5146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5146] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5147] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5147] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5147] memfd_create("syzkaller", 0) = 3 [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5147] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5147] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5147] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5147] close(3) = 0 [pid 5147] mkdir("./file1", 0777) = 0 [pid 5147] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5147] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5147] chdir("./file1") = 0 [pid 5147] ioctl(4, LOOP_CLR_FD) = 0 [pid 5147] close(4) = 0 [pid 5147] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... futex resumed>) = 0 [pid 5146] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... futex resumed>) = 1 [pid 5147] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5147] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5146] <... futex resumed>) = 0 [pid 5147] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5146] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... open resumed>) = 5 [pid 5147] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5146] <... futex resumed>) = 0 [pid 5146] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] ftruncate(5, 33587195 [pid 5146] <... futex resumed>) = 0 [pid 5146] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... ftruncate resumed>) = 0 [pid 5147] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... futex resumed>) = 0 [pid 5146] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] <... futex resumed>) = 1 [ 74.619600][ T5147] loop0: detected capacity change from 0 to 4096 [ 74.629049][ T5147] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 74.644278][ T5147] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 74.658991][ T5147] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5147] sendfile(4, 5, NULL, 281474978811909 [pid 5146] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5146] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5146] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5148 attached => {parent_tid=[5148]}, 88) = 5148 [pid 5148] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5148] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5148] rt_sigprocmask(SIG_SETMASK, [], [pid 5146] rt_sigprocmask(SIG_SETMASK, [], [pid 5148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5148] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5146] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5146] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5146] <... futex resumed>) = 1 [pid 5148] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5146] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5148] <... open resumed>) = 6 [pid 5148] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5148] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5146] <... futex resumed>) = 0 [pid 5146] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5148] <... futex resumed>) = 0 [pid 5148] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5148] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5148] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5146] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] sendfile(6, 7, NULL, 281474978811909 [pid 5146] <... futex resumed>) = 0 [pid 5146] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5146] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5146] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5146] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5149]}, 88) = 5149 [pid 5146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5146] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5149 attached [pid 5149] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5149] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5149] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5149] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5149] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5149] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5146] <... futex resumed>) = 0 [pid 5146] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... futex resumed>) = 0 [pid 5146] <... futex resumed>) = 1 [pid 5149] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5146] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... fallocate resumed>) = 0 [pid 5149] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5149] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5146] <... futex resumed>) = 0 [pid 5146] exit_group(0) = ? [pid 5149] <... futex resumed>) = ? [pid 5147] <... sendfile resumed>) = ? [pid 5149] +++ exited with 0 +++ [pid 5147] +++ exited with 0 +++ [pid 5148] <... sendfile resumed>) = ? [pid 5148] +++ exited with 0 +++ [pid 5146] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5146, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=36 /* 0.36 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5150 attached [pid 5150] set_robust_list(0x555555cd6760, 24) = 0 [pid 5150] chdir("./30") = 0 [pid 5150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5150] setpgid(0, 0) = 0 [pid 5150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5150] write(3, "1000", 4) = 4 [pid 5150] close(3) = 0 [pid 5150] symlink("/dev/binderfs", "./binderfs" [pid 5028] <... clone resumed>, child_tidptr=0x555555cd6750) = 5150 [pid 5150] <... symlink resumed>) = 0 [pid 5150] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5150] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5150] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5150] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5150] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5151]}, 88) = 5151 [pid 5150] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5150] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5151 attached [pid 5151] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5151] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 74.995057][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5151] memfd_create("syzkaller", 0) = 3 [pid 5151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5151] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5151] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5151] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5151] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5151] close(3) = 0 [pid 5151] mkdir("./file1", 0777) = 0 [pid 5151] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5151] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5151] chdir("./file1") = 0 [pid 5151] ioctl(4, LOOP_CLR_FD) = 0 [pid 5151] close(4) = 0 [pid 5151] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5150] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5151] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5150] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5151] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5150] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] ftruncate(5, 33587195) = 0 [pid 5151] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5150] <... futex resumed>) = 0 [pid 5150] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 75.094153][ T5151] loop0: detected capacity change from 0 to 4096 [ 75.105203][ T5151] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 75.118544][ T5151] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 75.131061][ T5151] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5151] sendfile(4, 5, NULL, 281474978811909 [pid 5150] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5150] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5150] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5150] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5150] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5152]}, 88) = 5152 [pid 5150] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5150] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5152 attached [pid 5152] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5152] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5152] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5152] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5150] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 1 [pid 5152] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5152] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5150] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 1 [pid 5152] sendfile(6, 7, NULL, 281474978811909 [pid 5150] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5150] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5150] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5150] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5150] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5150] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5153]}, 88) = 5153 [pid 5150] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5150] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5153 attached [pid 5153] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5153] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5153] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5153] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5153] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5150] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5150] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] <... futex resumed>) = 1 [pid 5153] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5153] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5153] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] exit_group(0 [pid 5153] <... futex resumed>) = ? [pid 5150] <... exit_group resumed>) = ? [pid 5153] +++ exited with 0 +++ [pid 5151] <... sendfile resumed>) = ? [pid 5152] <... sendfile resumed>) = ? [pid 5152] +++ exited with 0 +++ [pid 5151] +++ exited with 0 +++ [pid 5150] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5150, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./30/binderfs") = 0 umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5154 ./strace-static-x86_64: Process 5154 attached [pid 5154] set_robust_list(0x555555cd6760, 24) = 0 [pid 5154] chdir("./31") = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [ 75.441981][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5154] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5154] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5154] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5155 attached [pid 5155] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5155] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5155] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] <... clone3 resumed> => {parent_tid=[5155]}, 88) = 5155 [pid 5154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5154] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5154] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5155] memfd_create("syzkaller", 0) = 3 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5155] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5155] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5155] close(3) = 0 [pid 5155] mkdir("./file1", 0777) = 0 [pid 5155] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5155] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5155] chdir("./file1") = 0 [pid 5155] ioctl(4, LOOP_CLR_FD) = 0 [pid 5155] close(4) = 0 [pid 5155] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5155] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5154] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... open resumed>) = 4 [pid 5155] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5154] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] <... open resumed>) = 5 [pid 5154] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5155] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5155] ftruncate(5, 33587195 [pid 5154] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... ftruncate resumed>) = 0 [pid 5155] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5155] sendfile(4, 5, NULL, 281474978811909 [pid 5154] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 75.548191][ T5155] loop0: detected capacity change from 0 to 4096 [ 75.557417][ T5155] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 75.570417][ T5155] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 75.583289][ T5155] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5154] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5154] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5154] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5156]}, 88) = 5156 [pid 5154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5154] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5156 attached [pid 5156] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5156] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5156] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5156] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5154] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... futex resumed>) = 1 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5156] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5154] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] <... futex resumed>) = 1 [pid 5156] sendfile(6, 7, NULL, 281474978811909 [pid 5154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5154] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5154] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5157]}, 88) = 5157 [pid 5154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5154] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5157 attached [pid 5157] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5157] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5157] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5157] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5157] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5154] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] <... futex resumed>) = 1 [pid 5157] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5157] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] <... futex resumed>) = 0 [pid 5154] exit_group(0 [pid 5157] <... futex resumed>) = ? [pid 5154] <... exit_group resumed>) = ? [pid 5157] +++ exited with 0 +++ [pid 5155] <... sendfile resumed>) = ? [pid 5155] +++ exited with 0 +++ [pid 5156] <... sendfile resumed>) = ? [pid 5156] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./31/binderfs") = 0 umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5158 ./strace-static-x86_64: Process 5158 attached [pid 5158] set_robust_list(0x555555cd6760, 24) = 0 [pid 5158] chdir("./32") = 0 [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] setpgid(0, 0) = 0 [ 75.926835][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5158] write(3, "1000", 4) = 4 [pid 5158] close(3) = 0 [pid 5158] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5158] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5158] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5158] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5159 attached => {parent_tid=[5159]}, 88) = 5159 [pid 5158] rt_sigprocmask(SIG_SETMASK, [], [pid 5159] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] set_robust_list(0x7fd9ac9c59a0, 24 [pid 5158] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... set_robust_list resumed>) = 0 [pid 5158] <... futex resumed>) = 0 [pid 5159] rt_sigprocmask(SIG_SETMASK, [], [pid 5158] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] memfd_create("syzkaller", 0) = 3 [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5159] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5159] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5159] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5159] close(3) = 0 [pid 5159] mkdir("./file1", 0777) = 0 [pid 5159] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5159] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5159] chdir("./file1") = 0 [pid 5159] ioctl(4, LOOP_CLR_FD) = 0 [pid 5159] close(4) = 0 [pid 5159] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5158] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5159] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5158] <... futex resumed>) = 0 [ 76.036199][ T5159] loop0: detected capacity change from 0 to 4096 [ 76.046910][ T5159] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 76.060288][ T5159] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 76.072956][ T5159] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5158] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5159] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5158] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] ftruncate(5, 33587195) = 0 [pid 5159] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] sendfile(4, 5, NULL, 281474978811909 [pid 5158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5158] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5158] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5160 attached => {parent_tid=[5160]}, 88) = 5160 [pid 5160] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5160] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5160] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5160] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5158] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5158] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... open resumed>) = 6 [pid 5160] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... futex resumed>) = 1 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5160] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... futex resumed>) = 1 [pid 5160] sendfile(6, 7, NULL, 281474978811909 [pid 5158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5158] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5158] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5158] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5161]}, 88) = 5161 [pid 5158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5158] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5161 attached [pid 5161] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5161] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5161] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5161] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5161] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... futex resumed>) = 1 [pid 5161] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5161] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5161] <... futex resumed>) = 1 [pid 5161] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] exit_group(0 [pid 5161] <... futex resumed>) = ? [pid 5158] <... exit_group resumed>) = ? [pid 5161] +++ exited with 0 +++ [pid 5159] <... sendfile resumed>) = ? [pid 5159] +++ exited with 0 +++ [pid 5160] <... sendfile resumed>) = ? [pid 5160] +++ exited with 0 +++ [pid 5158] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5158, si_uid=0, si_status=0, si_utime=0, si_stime=37 /* 0.37 s */} --- umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./32/binderfs") = 0 umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5162 ./strace-static-x86_64: Process 5162 attached [pid 5162] set_robust_list(0x555555cd6760, 24) = 0 [pid 5162] chdir("./33") = 0 [pid 5162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 76.396864][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5162] setpgid(0, 0) = 0 [pid 5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5162] write(3, "1000", 4) = 4 [pid 5162] close(3) = 0 [pid 5162] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5162] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5162] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5162] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5162] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5162] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5162] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5163 attached => {parent_tid=[5163]}, 88) = 5163 [pid 5163] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5163] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5163] rt_sigprocmask(SIG_SETMASK, [], [pid 5162] rt_sigprocmask(SIG_SETMASK, [], [pid 5163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5163] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5162] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5162] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5163] memfd_create("syzkaller", 0) = 3 [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5163] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5163] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5163] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5163] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5163] close(3) = 0 [pid 5163] mkdir("./file1", 0777) = 0 [ 76.521315][ T5163] loop0: detected capacity change from 0 to 4096 [ 76.530390][ T5163] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 76.554983][ T5163] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 5163] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5163] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5163] chdir("./file1") = 0 [pid 5163] ioctl(4, LOOP_CLR_FD) = 0 [pid 5163] close(4) = 0 [pid 5163] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = 0 [pid 5162] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] <... futex resumed>) = 1 [pid 5163] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5163] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = 0 [pid 5162] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] <... futex resumed>) = 1 [pid 5163] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5163] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = 0 [pid 5162] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] <... futex resumed>) = 1 [pid 5163] ftruncate(5, 33587195) = 0 [pid 5163] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = 0 [pid 5162] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] <... futex resumed>) = 1 [ 76.571900][ T5163] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5163] sendfile(4, 5, NULL, 281474978811909 [pid 5162] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5162] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5162] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5162] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5162] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5164]}, 88) = 5164 [pid 5162] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5162] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5164 attached [pid 5164] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5164] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5164] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5164] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5162] <... futex resumed>) = 0 [pid 5164] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5162] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5162] <... futex resumed>) = 0 [pid 5164] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5162] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... open resumed>) = 7 [pid 5164] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5162] <... futex resumed>) = 0 [pid 5164] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5162] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5162] <... futex resumed>) = 0 [pid 5164] sendfile(6, 7, NULL, 281474978811909 [pid 5162] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5162] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5162] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5162] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5162] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5165]}, 88) = 5165 [pid 5162] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5162] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5165 attached [pid 5165] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5165] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5165] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5165] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5162] <... futex resumed>) = 0 [pid 5165] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5162] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5162] <... futex resumed>) = 0 [pid 5165] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5162] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] <... fallocate resumed>) = 0 [pid 5165] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5162] <... futex resumed>) = 0 [pid 5165] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5162] exit_group(0 [pid 5165] <... futex resumed>) = ? [pid 5162] <... exit_group resumed>) = ? [pid 5165] +++ exited with 0 +++ [pid 5163] <... sendfile resumed>) = ? [pid 5163] +++ exited with 0 +++ [pid 5164] <... sendfile resumed>) = ? [pid 5164] +++ exited with 0 +++ [pid 5162] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5162, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./33/binderfs") = 0 umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 [ 76.897429][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. rmdir("./33/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5166 ./strace-static-x86_64: Process 5166 attached [pid 5166] set_robust_list(0x555555cd6760, 24) = 0 [pid 5166] chdir("./34") = 0 [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5166] setpgid(0, 0) = 0 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5166] write(3, "1000", 4) = 4 [pid 5166] close(3) = 0 [pid 5166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5166] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5166] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5166] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5166] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5167]}, 88) = 5167 [pid 5166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5166] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5167 attached [pid 5167] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5167] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5167] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5167] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5167] close(3) = 0 [pid 5167] mkdir("./file1", 0777) = 0 [ 77.065221][ T5167] loop0: detected capacity change from 0 to 4096 [ 77.087107][ T5167] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 77.099929][ T5167] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 5167] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5167] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5167] chdir("./file1") = 0 [pid 5167] ioctl(4, LOOP_CLR_FD) = 0 [pid 5167] close(4) = 0 [pid 5167] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5166] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... futex resumed>) = 1 [pid 5167] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5167] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5166] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... futex resumed>) = 1 [pid 5167] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5167] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5166] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... futex resumed>) = 1 [pid 5167] ftruncate(5, 33587195) = 0 [pid 5167] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5166] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... futex resumed>) = 1 [ 77.113437][ T5167] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5167] sendfile(4, 5, NULL, 281474978811909 [pid 5166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5166] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5166] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5166] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5166] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5168]}, 88) = 5168 [pid 5166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5166] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5168 attached [pid 5168] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5168] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5168] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5166] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] <... futex resumed>) = 1 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5168] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5166] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] <... futex resumed>) = 1 [pid 5168] sendfile(6, 7, NULL, 281474978811909 [pid 5166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5166] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5166] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5166] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5169]}, 88) = 5169 [pid 5166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5166] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5169 attached [pid 5169] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5169] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5169] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5166] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... futex resumed>) = 1 [pid 5169] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5169] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5169] <... futex resumed>) = 1 [pid 5169] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] exit_group(0 [pid 5169] <... futex resumed>) = ? [pid 5166] <... exit_group resumed>) = ? [pid 5169] +++ exited with 0 +++ [pid 5168] <... sendfile resumed>) = ? [pid 5168] +++ exited with 0 +++ [pid 5167] <... sendfile resumed>) = ? [pid 5167] +++ exited with 0 +++ [pid 5166] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5166, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=37 /* 0.37 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./34/binderfs") = 0 umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./34/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5170 ./strace-static-x86_64: Process 5170 attached [pid 5170] set_robust_list(0x555555cd6760, 24) = 0 [pid 5170] chdir("./35") = 0 [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5170] setpgid(0, 0) = 0 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 77.413001][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5170] write(3, "1000", 4) = 4 [pid 5170] close(3) = 0 [pid 5170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5170] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5170] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5170] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5171 attached => {parent_tid=[5171]}, 88) = 5171 [pid 5170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5171] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5170] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5171] <... rseq resumed>) = 0 [pid 5171] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5171] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5171] memfd_create("syzkaller", 0) = 3 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5171] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5171] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5171] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5171] close(3) = 0 [pid 5171] mkdir("./file1", 0777) = 0 [pid 5171] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5171] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5171] chdir("./file1") = 0 [pid 5171] ioctl(4, LOOP_CLR_FD) = 0 [pid 5171] close(4) = 0 [pid 5171] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = 0 [pid 5170] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... futex resumed>) = 1 [pid 5171] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5171] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5170] <... futex resumed>) = 0 [pid 5171] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] <... futex resumed>) = 0 [pid 5171] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5170] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... open resumed>) = 5 [pid 5171] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5170] <... futex resumed>) = 0 [pid 5171] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] <... futex resumed>) = 0 [pid 5171] ftruncate(5, 33587195 [pid 5170] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... ftruncate resumed>) = 0 [pid 5171] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5170] <... futex resumed>) = 0 [pid 5171] sendfile(4, 5, NULL, 281474978811909 [pid 5170] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 77.524314][ T5171] loop0: detected capacity change from 0 to 4096 [ 77.533630][ T5171] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 77.548296][ T5171] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 77.562993][ T5171] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5170] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5170] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5170] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5172]}, 88) = 5172 [pid 5170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5170] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5172 attached [pid 5172] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5172] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5172] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5172] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5172] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = 0 [pid 5170] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... futex resumed>) = 1 [pid 5172] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5172] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = 0 [pid 5170] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... futex resumed>) = 1 [pid 5172] sendfile(6, 7, NULL, 281474978811909 [pid 5170] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5170] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5170] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5173]}, 88) = 5173 [pid 5170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5170] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5173 attached [pid 5173] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5173] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5173] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5173] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5173] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = 0 [pid 5170] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] <... futex resumed>) = 1 [pid 5173] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5173] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = 0 [pid 5173] <... futex resumed>) = 1 [pid 5173] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] exit_group(0 [pid 5173] <... futex resumed>) = ? [pid 5170] <... exit_group resumed>) = ? [pid 5172] <... sendfile resumed>) = ? [pid 5171] <... sendfile resumed>) = ? [pid 5173] +++ exited with 0 +++ [pid 5171] +++ exited with 0 +++ [pid 5172] +++ exited with 0 +++ [pid 5170] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=0, si_stime=40 /* 0.40 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./35/binderfs") = 0 umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./35/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5174 attached [pid 5174] set_robust_list(0x555555cd6760, 24) = 0 [pid 5174] chdir("./36") = 0 [pid 5174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5174] setpgid(0, 0 [pid 5028] <... clone resumed>, child_tidptr=0x555555cd6750) = 5174 [pid 5174] <... setpgid resumed>) = 0 [pid 5174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5174] write(3, "1000", 4) = 4 [pid 5174] close(3) = 0 [pid 5174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5174] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5174] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5174] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5174] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5174] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5174] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5175]}, 88) = 5175 [pid 5174] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5174] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5175 attached [pid 5175] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5175] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5175] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 77.930449][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5175] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5175] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5175] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5175] close(3) = 0 [pid 5175] mkdir("./file1", 0777) = 0 [pid 5175] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5175] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5175] chdir("./file1") = 0 [pid 5175] ioctl(4, LOOP_CLR_FD) = 0 [pid 5175] close(4) = 0 [pid 5175] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5174] <... futex resumed>) = 0 [pid 5175] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5174] <... futex resumed>) = 0 [pid 5175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5174] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] <... open resumed>) = 4 [pid 5175] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5175] <... futex resumed>) = 1 [pid 5174] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5175] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] <... futex resumed>) = 1 [pid 5175] ftruncate(5, 33587195) = 0 [pid 5175] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5174] <... futex resumed>) = 0 [pid 5175] sendfile(4, 5, NULL, 281474978811909 [ 78.028619][ T5175] loop0: detected capacity change from 0 to 4096 [ 78.040939][ T5175] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 78.055309][ T5175] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 78.066959][ T5175] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5174] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5174] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5174] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5174] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5174] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5174] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5176]}, 88) = 5176 [pid 5174] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5174] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5176 attached [pid 5176] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5176] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5176] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = 1 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5176] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... futex resumed>) = 1 [pid 5176] sendfile(6, 7, NULL, 281474978811909 [pid 5174] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5174] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5174] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5174] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5174] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5174] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5177]}, 88) = 5177 [pid 5174] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5174] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5177 attached [pid 5177] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5177] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5177] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5177] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5174] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... futex resumed>) = 1 [pid 5177] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5177] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = 0 [pid 5177] <... futex resumed>) = 1 [pid 5177] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] exit_group(0 [pid 5177] <... futex resumed>) = ? [pid 5174] <... exit_group resumed>) = ? [pid 5177] +++ exited with 0 +++ [pid 5176] <... sendfile resumed>) = ? [pid 5176] +++ exited with 0 +++ [pid 5175] <... sendfile resumed>) = ? [pid 5175] +++ exited with 0 +++ [pid 5174] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5174, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./36/binderfs") = 0 umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./36/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5178 ./strace-static-x86_64: Process 5178 attached [pid 5178] set_robust_list(0x555555cd6760, 24) = 0 [pid 5178] chdir("./37") = 0 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5178] setpgid(0, 0) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5178] write(3, "1000", 4) = 4 [pid 5178] close(3) = 0 [pid 5178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5178] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5178] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5178] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [ 78.382466][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5178] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5179]}, 88) = 5179 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5178] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5179 attached [pid 5179] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5179] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5179] memfd_create("syzkaller", 0) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5179] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5179] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5179] close(3) = 0 [pid 5179] mkdir("./file1", 0777) = 0 [ 78.482269][ T5179] loop0: detected capacity change from 0 to 4096 [ 78.501467][ T5179] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 78.515155][ T5179] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 5179] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5179] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file1") = 0 [pid 5179] ioctl(4, LOOP_CLR_FD) = 0 [pid 5179] close(4) = 0 [pid 5179] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5179] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5178] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... open resumed>) = 4 [pid 5179] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... futex resumed>) = 1 [pid 5179] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5179] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... futex resumed>) = 1 [pid 5179] ftruncate(5, 33587195) = 0 [pid 5179] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... futex resumed>) = 1 [ 78.530258][ T5179] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5179] sendfile(4, 5, NULL, 281474978811909 [pid 5178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5178] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5178] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5178] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5178] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5180]}, 88) = 5180 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5178] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5180 attached [pid 5180] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5180] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5180] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5180] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5180] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... futex resumed>) = 1 [pid 5180] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5180] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] sendfile(6, 7, NULL, 281474978811909 [pid 5178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5178] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5178] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5178] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5178] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5181]}, 88) = 5181 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5178] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5181 attached [pid 5181] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5181] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5181] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5181] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5181] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5181] <... futex resumed>) = 1 [pid 5181] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5181] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = 0 [pid 5181] <... futex resumed>) = 1 [pid 5181] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] exit_group(0 [pid 5181] <... futex resumed>) = ? [pid 5178] <... exit_group resumed>) = ? [pid 5181] +++ exited with 0 +++ [pid 5179] <... sendfile resumed>) = ? [pid 5179] +++ exited with 0 +++ [pid 5180] <... sendfile resumed>) = ? [pid 5180] +++ exited with 0 +++ [pid 5178] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5178, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./37/binderfs") = 0 umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./37/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./37") = 0 mkdir("./38", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5182 ./strace-static-x86_64: Process 5182 attached [pid 5182] set_robust_list(0x555555cd6760, 24) = 0 [pid 5182] chdir("./38") = 0 [pid 5182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5182] setpgid(0, 0) = 0 [pid 5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5182] write(3, "1000", 4) = 4 [pid 5182] close(3) = 0 [pid 5182] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5182] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5182] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5182] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5182] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5183]}, 88) = 5183 [pid 5182] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5182] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5183 attached [pid 5183] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5183] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5183] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 78.830458][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5183] memfd_create("syzkaller", 0) = 3 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5183] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5183] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5183] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5183] close(3) = 0 [pid 5183] mkdir("./file1", 0777) = 0 [pid 5183] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5183] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5183] chdir("./file1") = 0 [pid 5183] ioctl(4, LOOP_CLR_FD) = 0 [pid 5183] close(4) = 0 [pid 5183] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 1 [pid 5183] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... futex resumed>) = 0 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5183] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5182] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5183] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] <... futex resumed>) = 0 [pid 5182] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5183] <... futex resumed>) = 1 [pid 5183] ftruncate(5, 33587195) = 0 [pid 5183] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5182] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 78.926143][ T5183] loop0: detected capacity change from 0 to 4096 [ 78.935328][ T5183] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 78.950265][ T5183] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 78.965593][ T5183] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5183] sendfile(4, 5, NULL, 281474978811909 [pid 5182] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5182] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5182] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5182] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5184 attached => {parent_tid=[5184]}, 88) = 5184 [pid 5184] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5182] rt_sigprocmask(SIG_SETMASK, [], [pid 5184] <... rseq resumed>) = 0 [pid 5182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5184] set_robust_list(0x7fd9a47a49a0, 24 [pid 5182] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... set_robust_list resumed>) = 0 [pid 5182] <... futex resumed>) = 0 [pid 5184] rt_sigprocmask(SIG_SETMASK, [], [pid 5182] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5184] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5184] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5182] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5184] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5182] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] sendfile(6, 7, NULL, 281474978811909 [pid 5182] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5182] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5182] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5182] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5182] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5185]}, 88) = 5185 [pid 5182] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5182] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5185 attached [pid 5185] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5185] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5185] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5185] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5185] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5182] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5185] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5185] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5185] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] exit_group(0) = ? [pid 5185] <... futex resumed>) = ? [pid 5185] +++ exited with 0 +++ [pid 5184] <... sendfile resumed>) = ? [pid 5184] +++ exited with 0 +++ [pid 5183] <... sendfile resumed>) = ? [pid 5183] +++ exited with 0 +++ [pid 5182] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5182, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./38/binderfs") = 0 umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./38/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./38") = 0 mkdir("./39", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5186 ./strace-static-x86_64: Process 5186 attached [pid 5186] set_robust_list(0x555555cd6760, 24) = 0 [pid 5186] chdir("./39") = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5186] setpgid(0, 0) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5186] write(3, "1000", 4) = 4 [pid 5186] close(3) = 0 [pid 5186] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5186] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5186] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5186] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [ 79.316137][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5186] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5186] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5187 attached [pid 5187] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5186] <... clone3 resumed> => {parent_tid=[5187]}, 88) = 5187 [pid 5187] set_robust_list(0x7fd9ac9c59a0, 24 [pid 5186] rt_sigprocmask(SIG_SETMASK, [], [pid 5187] <... set_robust_list resumed>) = 0 [pid 5186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5187] rt_sigprocmask(SIG_SETMASK, [], [pid 5186] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5187] memfd_create("syzkaller", 0) = 3 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5187] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5187] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5187] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5187] close(3) = 0 [pid 5187] mkdir("./file1", 0777) = 0 [pid 5187] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5187] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5187] chdir("./file1") = 0 [pid 5187] ioctl(4, LOOP_CLR_FD) = 0 [pid 5187] close(4) = 0 [pid 5187] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5187] <... futex resumed>) = 1 [pid 5187] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5187] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5187] <... open resumed>) = 5 [ 79.418010][ T5187] loop0: detected capacity change from 0 to 4096 [ 79.427449][ T5187] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 79.442746][ T5187] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 79.458483][ T5187] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5187] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5187] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5186] <... futex resumed>) = 0 [pid 5187] ftruncate(5, 33587195 [pid 5186] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5187] <... ftruncate resumed>) = 0 [pid 5187] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5187] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5186] <... futex resumed>) = 0 [pid 5187] sendfile(4, 5, NULL, 281474978811909 [pid 5186] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5186] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5186] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5186] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5186] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5188 attached => {parent_tid=[5188]}, 88) = 5188 [pid 5186] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5186] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5188] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5188] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5188] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] sendfile(6, 7, NULL, 281474978811909 [pid 5186] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5186] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5186] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5186] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5186] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5189]}, 88) = 5189 ./strace-static-x86_64: Process 5189 attached [pid 5186] rt_sigprocmask(SIG_SETMASK, [], [pid 5189] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5186] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... rseq resumed>) = 0 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5189] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5189] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... futex resumed>) = 0 [pid 5186] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] <... futex resumed>) = 1 [pid 5189] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5189] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... futex resumed>) = 0 [pid 5189] <... futex resumed>) = 1 [pid 5189] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] exit_group(0 [pid 5189] <... futex resumed>) = ? [pid 5186] <... exit_group resumed>) = ? [pid 5189] +++ exited with 0 +++ [pid 5188] <... sendfile resumed>) = ? [pid 5187] <... sendfile resumed>) = ? [pid 5188] +++ exited with 0 +++ [pid 5187] +++ exited with 0 +++ [pid 5186] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=0, si_stime=37 /* 0.37 s */} --- umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./39/binderfs") = 0 umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./39/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./39") = 0 mkdir("./40", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 [ 79.804226][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5190 attached , child_tidptr=0x555555cd6750) = 5190 [pid 5190] set_robust_list(0x555555cd6760, 24) = 0 [pid 5190] chdir("./40") = 0 [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5190] setpgid(0, 0) = 0 [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5190] write(3, "1000", 4) = 4 [pid 5190] close(3) = 0 [pid 5190] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5190] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5190] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5190] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5190] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5190] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5191 attached => {parent_tid=[5191]}, 88) = 5191 [pid 5190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5190] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5190] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5191] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5191] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5191] memfd_create("syzkaller", 0) = 3 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5191] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5191] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5191] close(3) = 0 [pid 5191] mkdir("./file1", 0777) = 0 [pid 5191] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5191] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5191] chdir("./file1") = 0 [pid 5191] ioctl(4, LOOP_CLR_FD) = 0 [pid 5191] close(4) = 0 [pid 5191] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5191] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5190] <... futex resumed>) = 0 [pid 5191] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5190] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] <... open resumed>) = 4 [ 79.925551][ T5191] loop0: detected capacity change from 0 to 4096 [ 79.936106][ T5191] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 79.951551][ T5191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 79.966679][ T5191] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5191] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5191] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5191] ftruncate(5, 33587195 [pid 5190] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... ftruncate resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 1 [pid 5191] sendfile(4, 5, NULL, 281474978811909 [pid 5190] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5190] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5190] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5190] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5190] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5192 attached [pid 5192] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5192] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5192] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5192] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] <... clone3 resumed> => {parent_tid=[5192]}, 88) = 5192 [pid 5190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5190] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 1 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5190] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... open resumed>) = 6 [pid 5192] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... futex resumed>) = 1 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5192] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5192] <... futex resumed>) = 1 [pid 5192] sendfile(6, 7, NULL, 281474978811909 [pid 5190] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5190] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5190] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5190] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5190] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5190] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5190] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5193]}, 88) = 5193 [pid 5190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5190] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5193 attached [pid 5193] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5193] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5193] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5193] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] <... futex resumed>) = 1 [pid 5193] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5193] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5193] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] exit_group(0) = ? [pid 5193] <... futex resumed>) = ? [pid 5193] +++ exited with 0 +++ [pid 5192] <... sendfile resumed>) = ? [pid 5191] <... sendfile resumed>) = ? [pid 5192] +++ exited with 0 +++ [pid 5191] +++ exited with 0 +++ [pid 5190] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=0, si_stime=39 /* 0.39 s */} --- umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./40/binderfs") = 0 umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./40/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./40") = 0 mkdir("./41", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5194 ./strace-static-x86_64: Process 5194 attached [pid 5194] set_robust_list(0x555555cd6760, 24) = 0 [pid 5194] chdir("./41") = 0 [pid 5194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5194] setpgid(0, 0) = 0 [pid 5194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5194] write(3, "1000", 4) = 4 [pid 5194] close(3) = 0 [pid 5194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5194] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5194] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 80.306690][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5194] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5194] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5194] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5195 attached [pid 5195] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5195] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5195] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5194] <... clone3 resumed> => {parent_tid=[5195]}, 88) = 5195 [pid 5195] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5194] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5194] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5195] memfd_create("syzkaller", 0) = 3 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5195] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5195] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5195] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5195] close(3) = 0 [pid 5195] mkdir("./file1", 0777) = 0 [pid 5195] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5195] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5195] chdir("./file1") = 0 [pid 5195] ioctl(4, LOOP_CLR_FD) = 0 [pid 5195] close(4) = 0 [pid 5195] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5195] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... futex resumed>) = 0 [pid 5194] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5194] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = 1 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5194] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... open resumed>) = 5 [pid 5195] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5195] ftruncate(5, 33587195 [pid 5194] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... ftruncate resumed>) = 0 [pid 5194] <... futex resumed>) = 0 [pid 5195] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] sendfile(4, 5, NULL, 281474978811909 [pid 5194] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 80.412536][ T5195] loop0: detected capacity change from 0 to 4096 [ 80.421605][ T5195] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 80.437262][ T5195] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 80.452878][ T5195] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5194] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5194] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5194] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5194] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5194] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5196 attached => {parent_tid=[5196]}, 88) = 5196 [pid 5194] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5194] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5196] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5196] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5196] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5194] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5196] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5194] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] sendfile(6, 7, NULL, 281474978811909 [pid 5194] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5194] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5194] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5194] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5194] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5197 attached => {parent_tid=[5197]}, 88) = 5197 [pid 5194] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5197] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5194] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] <... rseq resumed>) = 0 [pid 5197] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5197] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5197] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5197] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = 0 [pid 5194] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5194] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] <... futex resumed>) = 1 [pid 5197] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5197] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5194] <... futex resumed>) = 0 [pid 5197] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] exit_group(0 [pid 5197] <... futex resumed>) = ? [pid 5194] <... exit_group resumed>) = ? [pid 5197] +++ exited with 0 +++ [pid 5196] <... sendfile resumed>) = ? [pid 5195] <... sendfile resumed>) = ? [pid 5195] +++ exited with 0 +++ [pid 5196] +++ exited with 0 +++ [pid 5194] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5194, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=35 /* 0.35 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./41/binderfs") = 0 umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./41/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./41") = 0 mkdir("./42", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 80.832359][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5198 ./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x555555cd6760, 24) = 0 [pid 5198] chdir("./42") = 0 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5198] setpgid(0, 0) = 0 [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5198] write(3, "1000", 4) = 4 [pid 5198] close(3) = 0 [pid 5198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5198] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5198] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5198] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5199]}, 88) = 5199 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5198] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5199 attached [pid 5199] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5199] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5199] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5199] memfd_create("syzkaller", 0) = 3 [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5199] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5199] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5199] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5199] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5199] close(3) = 0 [pid 5199] mkdir("./file1", 0777) = 0 [pid 5199] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5199] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5199] chdir("./file1") = 0 [pid 5199] ioctl(4, LOOP_CLR_FD) = 0 [pid 5199] close(4) = 0 [pid 5199] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5199] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5198] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] <... open resumed>) = 4 [pid 5199] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] <... futex resumed>) = 1 [pid 5199] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5199] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] <... futex resumed>) = 1 [pid 5199] ftruncate(5, 33587195) = 0 [pid 5199] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] <... futex resumed>) = 1 [ 80.954624][ T5199] loop0: detected capacity change from 0 to 4096 [ 80.964880][ T5199] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 80.979147][ T5199] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 80.994501][ T5199] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5199] sendfile(4, 5, NULL, 281474978811909 [pid 5198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5198] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5198] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5200]}, 88) = 5200 ./strace-static-x86_64: Process 5200 attached [pid 5200] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], [pid 5200] <... rseq resumed>) = 0 [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5200] set_robust_list(0x7fd9a47a49a0, 24 [pid 5198] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... set_robust_list resumed>) = 0 [pid 5198] <... futex resumed>) = 0 [pid 5200] rt_sigprocmask(SIG_SETMASK, [], [pid 5198] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5200] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5200] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5200] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] sendfile(6, 7, NULL, 281474978811909 [pid 5198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5198] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5198] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5201 attached => {parent_tid=[5201]}, 88) = 5201 [pid 5201] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5201] <... rseq resumed>) = 0 [pid 5198] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] set_robust_list(0x7fd9a47839a0, 24 [pid 5198] <... futex resumed>) = 0 [pid 5201] <... set_robust_list resumed>) = 0 [pid 5198] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5201] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5201] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5201] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... futex resumed>) = 0 [pid 5201] <... futex resumed>) = 1 [pid 5198] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5201] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5201] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5201] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] exit_group(0 [pid 5201] <... futex resumed>) = ? [pid 5198] <... exit_group resumed>) = ? [pid 5201] +++ exited with 0 +++ [pid 5200] <... sendfile resumed>) = ? [pid 5199] <... sendfile resumed>) = ? [pid 5199] +++ exited with 0 +++ [pid 5200] +++ exited with 0 +++ [pid 5198] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./42/binderfs") = 0 umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./42/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./42") = 0 mkdir("./43", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5202 ./strace-static-x86_64: Process 5202 attached [pid 5202] set_robust_list(0x555555cd6760, 24) = 0 [pid 5202] chdir("./43") = 0 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5202] setpgid(0, 0) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5202] write(3, "1000", 4) = 4 [pid 5202] close(3) = 0 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5202] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5202] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5202] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5202] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5203 attached [ 81.316454][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. => {parent_tid=[5203]}, 88) = 5203 [pid 5203] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5202] rt_sigprocmask(SIG_SETMASK, [], [pid 5203] set_robust_list(0x7fd9ac9c59a0, 24 [pid 5202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5203] <... set_robust_list resumed>) = 0 [pid 5202] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] rt_sigprocmask(SIG_SETMASK, [], [pid 5202] <... futex resumed>) = 0 [pid 5202] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5203] memfd_create("syzkaller", 0) = 3 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5203] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5203] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5203] close(3) = 0 [pid 5203] mkdir("./file1", 0777) = 0 [pid 5203] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5203] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5203] chdir("./file1") = 0 [pid 5203] ioctl(4, LOOP_CLR_FD) = 0 [pid 5203] close(4) = 0 [pid 5203] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5202] <... futex resumed>) = 0 [pid 5203] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5202] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5202] <... futex resumed>) = 0 [pid 5203] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5202] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] <... open resumed>) = 4 [pid 5203] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5202] <... futex resumed>) = 0 [pid 5203] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5202] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5202] <... futex resumed>) = 0 [pid 5203] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5202] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] <... open resumed>) = 5 [pid 5203] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5202] <... futex resumed>) = 0 [pid 5203] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5202] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5202] <... futex resumed>) = 0 [pid 5203] ftruncate(5, 33587195 [pid 5202] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] <... ftruncate resumed>) = 0 [pid 5203] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 81.427619][ T5203] loop0: detected capacity change from 0 to 4096 [ 81.439232][ T5203] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 81.454206][ T5203] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 81.469279][ T5203] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5202] <... futex resumed>) = 0 [pid 5203] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5202] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5202] <... futex resumed>) = 0 [pid 5203] sendfile(4, 5, NULL, 281474978811909 [pid 5202] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5202] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5202] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5202] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5204]}, 88) = 5204 ./strace-static-x86_64: Process 5204 attached [pid 5204] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5204] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5204] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5204] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5202] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5202] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5204] <... futex resumed>) = 0 [pid 5204] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5202] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... open resumed>) = 6 [pid 5204] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... futex resumed>) = 0 [pid 5202] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... futex resumed>) = 1 [pid 5204] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5204] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... futex resumed>) = 0 [pid 5202] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... futex resumed>) = 1 [pid 5204] sendfile(6, 7, NULL, 281474978811909 [pid 5202] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5202] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5202] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5202] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5205]}, 88) = 5205 [pid 5202] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5202] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5205 attached [pid 5205] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5205] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5205] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5205] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... futex resumed>) = 0 [pid 5202] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] <... futex resumed>) = 1 [pid 5205] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5205] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5202] <... futex resumed>) = 0 [ 81.653803][ T918] cfg80211: failed to load regulatory.db [pid 5205] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5202] exit_group(0 [pid 5205] <... futex resumed>) = ? [pid 5202] <... exit_group resumed>) = ? [pid 5205] +++ exited with 0 +++ [pid 5203] <... sendfile resumed>) = ? [pid 5203] +++ exited with 0 +++ [pid 5204] <... sendfile resumed>) = ? [pid 5204] +++ exited with 0 +++ [pid 5202] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./43/binderfs") = 0 umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./43/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./43") = 0 mkdir("./44", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5206 ./strace-static-x86_64: Process 5206 attached [pid 5206] set_robust_list(0x555555cd6760, 24) = 0 [pid 5206] chdir("./44") = 0 [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5206] setpgid(0, 0) = 0 [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5206] write(3, "1000", 4) = 4 [pid 5206] close(3) = 0 [pid 5206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5206] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5206] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [ 81.801483][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5206] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5206] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5207 attached [pid 5207] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5207] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5206] <... clone3 resumed> => {parent_tid=[5207]}, 88) = 5207 [pid 5207] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5206] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5206] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5207] memfd_create("syzkaller", 0) = 3 [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5207] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5207] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5207] close(3) = 0 [pid 5207] mkdir("./file1", 0777) = 0 [pid 5207] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5207] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5207] chdir("./file1") = 0 [pid 5207] ioctl(4, LOOP_CLR_FD) = 0 [pid 5207] close(4) = 0 [pid 5207] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5207] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5206] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... open resumed>) = 4 [pid 5207] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5207] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5206] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... open resumed>) = 5 [pid 5207] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5207] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5207] ftruncate(5, 33587195 [pid 5206] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... ftruncate resumed>) = 0 [pid 5207] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5207] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [ 81.915522][ T5207] loop0: detected capacity change from 0 to 4096 [ 81.926754][ T5207] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 81.942285][ T5207] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 81.957311][ T5207] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5207] sendfile(4, 5, NULL, 281474978811909 [pid 5206] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5206] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5206] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5206] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5208]}, 88) = 5208 [pid 5206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5206] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5208 attached [pid 5208] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5208] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5208] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5208] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... futex resumed>) = 0 [pid 5206] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... futex resumed>) = 1 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5208] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... futex resumed>) = 0 [pid 5206] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... futex resumed>) = 1 [pid 5208] sendfile(6, 7, NULL, 281474978811909 [pid 5206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5206] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5206] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5206] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5209]}, 88) = 5209 [pid 5206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5206] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5209 attached [pid 5209] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5209] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5209] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5209] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5209] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5209] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5206] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... fallocate resumed>) = 0 [pid 5209] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... futex resumed>) = 0 [pid 5209] <... futex resumed>) = 1 [pid 5209] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] exit_group(0) = ? [pid 5209] <... futex resumed>) = ? [pid 5209] +++ exited with 0 +++ [pid 5207] <... sendfile resumed>) = ? [pid 5207] +++ exited with 0 +++ [pid 5208] <... sendfile resumed>) = ? [pid 5208] +++ exited with 0 +++ [pid 5206] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5206, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./44/binderfs") = 0 umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./44/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./44") = 0 mkdir("./45", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5210 attached , child_tidptr=0x555555cd6750) = 5210 [pid 5210] set_robust_list(0x555555cd6760, 24) = 0 [pid 5210] chdir("./45") = 0 [pid 5210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5210] setpgid(0, 0) = 0 [pid 5210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5210] write(3, "1000", 4) = 4 [pid 5210] close(3) = 0 [pid 5210] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5210] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5210] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 82.308735][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5210] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5210] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5211]}, 88) = 5211 ./strace-static-x86_64: Process 5211 attached [pid 5211] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5211] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5211] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5211] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5210] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5211] <... futex resumed>) = 0 [pid 5210] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5211] memfd_create("syzkaller", 0) = 3 [pid 5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5211] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5211] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5211] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5211] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5211] close(3) = 0 [pid 5211] mkdir("./file1", 0777) = 0 [pid 5211] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5211] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5211] chdir("./file1") = 0 [pid 5211] ioctl(4, LOOP_CLR_FD) = 0 [pid 5211] close(4) = 0 [pid 5211] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5210] <... futex resumed>) = 0 [pid 5211] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5210] <... futex resumed>) = 0 [pid 5211] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5210] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5211] <... open resumed>) = 4 [pid 5211] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 0 [pid 5210] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5211] <... futex resumed>) = 1 [pid 5211] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5211] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5210] <... futex resumed>) = 0 [pid 5211] ftruncate(5, 33587195 [pid 5210] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] <... ftruncate resumed>) = 0 [pid 5210] <... futex resumed>) = 0 [pid 5211] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5211] <... futex resumed>) = 0 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5211] sendfile(4, 5, NULL, 281474978811909 [pid 5210] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 82.412290][ T5211] loop0: detected capacity change from 0 to 4096 [ 82.421447][ T5211] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 82.436395][ T5211] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 82.451211][ T5211] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5210] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5210] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5210] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5210] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5212]}, 88) = 5212 [pid 5210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5210] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5212 attached [pid 5212] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5212] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5212] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5212] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5210] <... futex resumed>) = 0 [pid 5210] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5212] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5210] <... futex resumed>) = 0 [pid 5212] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5210] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] <... futex resumed>) = 0 [pid 5212] sendfile(6, 7, NULL, 281474978811909 [pid 5210] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5210] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5210] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5210] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5213]}, 88) = 5213 [pid 5210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5210] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5213 attached [pid 5213] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5213] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5213] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5213] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5213] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 0 [pid 5210] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] <... futex resumed>) = 1 [pid 5213] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5213] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 1 [pid 5213] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] exit_group(0 [pid 5213] <... futex resumed>) = ? [pid 5210] <... exit_group resumed>) = ? [pid 5213] +++ exited with 0 +++ [pid 5212] <... sendfile resumed>) = ? [pid 5211] <... sendfile resumed>) = ? [pid 5211] +++ exited with 0 +++ [pid 5212] +++ exited with 0 +++ [pid 5210] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5210, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./45/binderfs") = 0 umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./45/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./45") = 0 mkdir("./46", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5214 ./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x555555cd6760, 24) = 0 [pid 5214] chdir("./46") = 0 [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 82.766319][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5214] setpgid(0, 0) = 0 [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5214] write(3, "1000", 4) = 4 [pid 5214] close(3) = 0 [pid 5214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5214] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5214] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5214] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5214] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5215]}, 88) = 5215 [pid 5214] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5214] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5215 attached [pid 5215] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5215] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5215] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5215] memfd_create("syzkaller", 0) = 3 [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5215] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5215] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5215] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5215] close(3) = 0 [pid 5215] mkdir("./file1", 0777) = 0 [pid 5215] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5215] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5215] chdir("./file1") = 0 [pid 5215] ioctl(4, LOOP_CLR_FD) = 0 [pid 5215] close(4) = 0 [pid 5215] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5215] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5215] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5214] <... futex resumed>) = 0 [pid 5214] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... open resumed>) = 4 [pid 5215] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5215] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5214] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... open resumed>) = 5 [pid 5215] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5215] ftruncate(5, 33587195 [pid 5214] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... ftruncate resumed>) = 0 [pid 5215] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5214] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] sendfile(4, 5, NULL, 281474978811909 [pid 5214] <... futex resumed>) = 0 [ 82.865372][ T5215] loop0: detected capacity change from 0 to 4096 [ 82.875643][ T5215] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 82.889983][ T5215] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 82.905546][ T5215] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5214] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5214] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5214] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5214] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5216]}, 88) = 5216 ./strace-static-x86_64: Process 5216 attached [pid 5214] rt_sigprocmask(SIG_SETMASK, [], [pid 5216] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] <... rseq resumed>) = 0 [pid 5214] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] set_robust_list(0x7fd9a47a49a0, 24 [pid 5214] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... set_robust_list resumed>) = 0 [pid 5216] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5216] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5216] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5214] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5216] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = 0 [pid 5216] <... futex resumed>) = 1 [pid 5214] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] sendfile(6, 7, NULL, 281474978811909 [pid 5214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5214] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5214] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5214] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5214] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5217 attached => {parent_tid=[5217]}, 88) = 5217 [pid 5217] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5214] rt_sigprocmask(SIG_SETMASK, [], [pid 5217] <... rseq resumed>) = 0 [pid 5214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5217] set_robust_list(0x7fd9a47839a0, 24 [pid 5214] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] <... set_robust_list resumed>) = 0 [pid 5217] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5217] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5217] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = 0 [pid 5214] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] <... futex resumed>) = 1 [pid 5217] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5217] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = 0 [pid 5217] <... futex resumed>) = 1 [pid 5217] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] exit_group(0 [pid 5217] <... futex resumed>) = ? [pid 5214] <... exit_group resumed>) = ? [pid 5217] +++ exited with 0 +++ [pid 5216] <... sendfile resumed>) = ? [pid 5215] <... sendfile resumed>) = ? [pid 5216] +++ exited with 0 +++ [pid 5215] +++ exited with 0 +++ [pid 5214] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5214, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./46/binderfs") = 0 umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./46/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./46") = 0 mkdir("./47", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5218 ./strace-static-x86_64: Process 5218 attached [pid 5218] set_robust_list(0x555555cd6760, 24) = 0 [pid 5218] chdir("./47") = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4) = 4 [pid 5218] close(3) = 0 [pid 5218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5218] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5218] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5218] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5219]}, 88) = 5219 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5218] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5219 attached [pid 5219] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5219] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5219] memfd_create("syzkaller", 0) = 3 [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 83.234703][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5219] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5219] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5219] close(3) = 0 [pid 5219] mkdir("./file1", 0777) = 0 [pid 5219] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5219] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5219] chdir("./file1") = 0 [pid 5219] ioctl(4, LOOP_CLR_FD) = 0 [pid 5219] close(4) = 0 [pid 5219] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... futex resumed>) = 1 [pid 5219] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5219] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... futex resumed>) = 1 [pid 5219] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5219] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... futex resumed>) = 1 [pid 5219] ftruncate(5, 33587195) = 0 [pid 5219] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... futex resumed>) = 1 [ 83.321869][ T5219] loop0: detected capacity change from 0 to 4096 [ 83.330793][ T5219] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 83.346663][ T5219] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 83.361545][ T5219] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5219] sendfile(4, 5, NULL, 281474978811909 [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5218] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5218] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5220 attached => {parent_tid=[5220]}, 88) = 5220 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5220] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5218] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... rseq resumed>) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5220] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5220] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] <... open resumed>) = 7 [pid 5220] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] sendfile(6, 7, NULL, 281474978811909 [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5218] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5218] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5218] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5218] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5221 attached [pid 5221] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5218] <... clone3 resumed> => {parent_tid=[5221]}, 88) = 5221 [pid 5221] <... rseq resumed>) = 0 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], [pid 5221] set_robust_list(0x7fd9a47839a0, 24 [pid 5218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... set_robust_list resumed>) = 0 [pid 5221] rt_sigprocmask(SIG_SETMASK, [], [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5221] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5221] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5218] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5221] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5221] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] exit_group(0 [pid 5221] <... futex resumed>) = ? [pid 5218] <... exit_group resumed>) = ? [pid 5221] +++ exited with 0 +++ [pid 5219] <... sendfile resumed>) = ? [pid 5219] +++ exited with 0 +++ [pid 5220] <... sendfile resumed>) = ? [pid 5220] +++ exited with 0 +++ [pid 5218] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./47/binderfs") = 0 umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./47/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./47") = 0 mkdir("./48", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5222 ./strace-static-x86_64: Process 5222 attached [pid 5222] set_robust_list(0x555555cd6760, 24) = 0 [pid 5222] chdir("./48") = 0 [pid 5222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5222] setpgid(0, 0) = 0 [pid 5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 83.690410][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5222] write(3, "1000", 4) = 4 [pid 5222] close(3) = 0 [pid 5222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5222] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5222] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5222] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5222] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5222] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5222] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5223 attached => {parent_tid=[5223]}, 88) = 5223 [pid 5223] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5223] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5223] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5223] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5222] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5223] memfd_create("syzkaller", 0 [pid 5222] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5223] <... memfd_create resumed>) = 3 [pid 5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5223] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5223] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5223] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5223] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5223] close(3) = 0 [pid 5223] mkdir("./file1", 0777) = 0 [pid 5223] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5223] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5223] chdir("./file1") = 0 [pid 5223] ioctl(4, LOOP_CLR_FD) = 0 [pid 5223] close(4) = 0 [pid 5223] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5222] <... futex resumed>) = 0 [pid 5222] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5223] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... futex resumed>) = 0 [pid 5222] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... futex resumed>) = 1 [pid 5223] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5223] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5222] <... futex resumed>) = 0 [pid 5223] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5222] <... futex resumed>) = 0 [pid 5223] ftruncate(5, 33587195 [pid 5222] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... ftruncate resumed>) = 0 [pid 5223] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5222] <... futex resumed>) = 0 [pid 5223] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [ 83.820360][ T5223] loop0: detected capacity change from 0 to 4096 [ 83.830970][ T5223] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 83.846731][ T5223] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 83.862666][ T5223] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5222] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5222] <... futex resumed>) = 0 [pid 5222] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] sendfile(4, 5, NULL, 281474978811909 [pid 5222] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5222] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5222] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5222] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5222] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5222] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5222] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5224]}, 88) = 5224 [pid 5222] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5222] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5224 attached [pid 5224] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5224] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5224] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5224] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... futex resumed>) = 0 [pid 5222] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = 1 [pid 5224] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5224] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... futex resumed>) = 0 [pid 5222] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = 1 [pid 5224] sendfile(6, 7, NULL, 281474978811909 [pid 5222] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5222] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5222] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5222] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5222] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5225]}, 88) = 5225 [pid 5222] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5222] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5225 attached [pid 5225] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5225] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5225] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5225] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... futex resumed>) = 0 [pid 5222] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] <... futex resumed>) = 1 [pid 5225] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5225] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... futex resumed>) = 0 [pid 5225] <... futex resumed>) = 1 [pid 5225] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] exit_group(0 [pid 5225] <... futex resumed>) = ? [pid 5222] <... exit_group resumed>) = ? [pid 5223] <... sendfile resumed>) = ? [pid 5223] +++ exited with 0 +++ [pid 5225] +++ exited with 0 +++ [pid 5224] <... sendfile resumed>) = ? [pid 5224] +++ exited with 0 +++ [pid 5222] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5222, si_uid=0, si_status=0, si_utime=0, si_stime=40 /* 0.40 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./48/binderfs") = 0 umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./48/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./48") = 0 mkdir("./49", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5226 ./strace-static-x86_64: Process 5226 attached [pid 5226] set_robust_list(0x555555cd6760, 24) = 0 [pid 5226] chdir("./49") = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5226] setpgid(0, 0) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5226] write(3, "1000", 4) = 4 [pid 5226] close(3) = 0 [pid 5226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5226] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5226] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5226] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5227 attached [pid 5227] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5227] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5227] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5227] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] <... clone3 resumed> => {parent_tid=[5227]}, 88) = 5227 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 84.188560][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5226] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5227] <... futex resumed>) = 0 [pid 5226] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5227] memfd_create("syzkaller", 0) = 3 [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5227] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5227] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5227] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5227] close(3) = 0 [pid 5227] mkdir("./file1", 0777) = 0 [pid 5227] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5227] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5227] chdir("./file1") = 0 [pid 5227] ioctl(4, LOOP_CLR_FD) = 0 [pid 5227] close(4) = 0 [pid 5227] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5227] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 0 [pid 5227] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5226] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... open resumed>) = 4 [pid 5227] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5226] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5226] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... open resumed>) = 5 [pid 5227] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5227] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] <... futex resumed>) = 0 [pid 5226] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] ftruncate(5, 33587195) = 0 [pid 5227] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5227] sendfile(4, 5, NULL, 281474978811909 [pid 5226] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 84.286355][ T5227] loop0: detected capacity change from 0 to 4096 [ 84.295589][ T5227] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 84.311769][ T5227] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 84.326627][ T5227] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5226] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5226] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5226] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5228]}, 88) = 5228 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5228 attached NULL, 8) = 0 [pid 5226] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5228] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5228] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5228] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5228] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] <... futex resumed>) = 0 [pid 5228] <... futex resumed>) = 1 [pid 5226] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5228] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] <... futex resumed>) = 0 [pid 5228] <... futex resumed>) = 1 [pid 5226] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] sendfile(6, 7, NULL, 281474978811909 [pid 5226] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5226] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5226] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5226] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5229 attached => {parent_tid=[5229]}, 88) = 5229 [pid 5229] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5229] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5229] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5229] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5226] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = 1 [pid 5229] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5226] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] <... open resumed>) = 8 [pid 5229] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5226] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5229] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] <... futex resumed>) = 0 [pid 5229] <... futex resumed>) = 1 [pid 5229] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] exit_group(0) = ? [pid 5229] <... futex resumed>) = ? [pid 5229] +++ exited with 0 +++ [pid 5227] <... sendfile resumed>) = ? [pid 5227] +++ exited with 0 +++ [pid 5228] <... sendfile resumed>) = ? [pid 5228] +++ exited with 0 +++ [pid 5226] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./49/binderfs") = 0 umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./49/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./49") = 0 mkdir("./50", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5230 ./strace-static-x86_64: Process 5230 attached [pid 5230] set_robust_list(0x555555cd6760, 24) = 0 [pid 5230] chdir("./50") = 0 [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5230] setpgid(0, 0) = 0 [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5230] write(3, "1000", 4) = 4 [pid 5230] close(3) = 0 [pid 5230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5230] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [ 84.665859][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5230] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5230] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5230] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5231 attached [pid 5231] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5231] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5231] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5231] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] <... clone3 resumed> => {parent_tid=[5231]}, 88) = 5231 [pid 5230] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5230] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5230] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5231] memfd_create("syzkaller", 0) = 3 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5231] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5231] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5231] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5231] close(3) = 0 [pid 5231] mkdir("./file1", 0777) = 0 [pid 5231] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5231] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5231] chdir("./file1") = 0 [pid 5231] ioctl(4, LOOP_CLR_FD) = 0 [pid 5231] close(4) = 0 [pid 5231] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5231] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] <... futex resumed>) = 0 [pid 5231] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5230] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... open resumed>) = 4 [pid 5231] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5231] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] <... futex resumed>) = 0 [pid 5230] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5231] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5230] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5231] ftruncate(5, 33587195 [pid 5230] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... ftruncate resumed>) = 0 [pid 5231] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5231] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] <... futex resumed>) = 0 [pid 5231] sendfile(4, 5, NULL, 281474978811909 [ 84.768988][ T5231] loop0: detected capacity change from 0 to 4096 [ 84.779632][ T5231] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 84.794238][ T5231] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 84.809355][ T5231] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5230] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5230] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5230] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5230] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5233 attached => {parent_tid=[5233]}, 88) = 5233 [pid 5233] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5233] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5233] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5230] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5233] <... futex resumed>) = 0 [pid 5230] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5233] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5230] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5230] <... futex resumed>) = 0 [pid 5230] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] <... open resumed>) = 7 [pid 5233] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5233] sendfile(6, 7, NULL, 281474978811909 [pid 5230] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5230] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5230] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5230] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5234 attached => {parent_tid=[5234]}, 88) = 5234 [pid 5234] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5230] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5230] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] <... rseq resumed>) = 0 [pid 5234] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5234] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5234] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5234] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... futex resumed>) = 0 [pid 5234] <... futex resumed>) = 1 [pid 5230] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5230] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5234] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5234] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] exit_group(0) = ? [pid 5234] <... futex resumed>) = ? [pid 5231] <... sendfile resumed>) = ? [pid 5234] +++ exited with 0 +++ [pid 5231] +++ exited with 0 +++ [pid 5233] <... sendfile resumed>) = ? [pid 5233] +++ exited with 0 +++ [pid 5230] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5230, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./50/binderfs") = 0 umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./50/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./50") = 0 mkdir("./51", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5235 ./strace-static-x86_64: Process 5235 attached [pid 5235] set_robust_list(0x555555cd6760, 24) = 0 [pid 5235] chdir("./51") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5235] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5235] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5236]}, 88) = 5236 ./strace-static-x86_64: Process 5236 attached [pid 5236] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [ 85.133053][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5235] rt_sigprocmask(SIG_SETMASK, [], [pid 5236] <... rseq resumed>) = 0 [pid 5235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5235] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5236] memfd_create("syzkaller", 0) = 3 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5236] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5236] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5236] close(3) = 0 [pid 5236] mkdir("./file1", 0777) = 0 [pid 5236] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5236] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5236] chdir("./file1") = 0 [pid 5236] ioctl(4, LOOP_CLR_FD) = 0 [pid 5236] close(4) = 0 [pid 5236] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = 1 [pid 5236] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5235] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... open resumed>) = 4 [pid 5236] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5236] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5236] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5236] ftruncate(5, 33587195 [pid 5235] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] <... ftruncate resumed>) = 0 [pid 5236] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5236] sendfile(4, 5, NULL, 281474978811909 [pid 5235] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.234410][ T5236] loop0: detected capacity change from 0 to 4096 [ 85.244907][ T5236] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 85.258180][ T5236] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 85.271107][ T5236] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5235] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5235] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5235] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5237 attached [pid 5237] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5237] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5237] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5237] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... clone3 resumed> => {parent_tid=[5237]}, 88) = 5237 [pid 5235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5235] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5237] <... futex resumed>) = 0 [pid 5235] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5237] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] <... futex resumed>) = 1 [pid 5237] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5237] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] <... futex resumed>) = 1 [pid 5237] sendfile(6, 7, NULL, 281474978811909 [pid 5235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5235] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5235] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5235] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5235] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5238]}, 88) = 5238 [pid 5235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5235] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5238 attached [pid 5238] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5238] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5238] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5238] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5238] <... futex resumed>) = 1 [pid 5238] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5238] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5238] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] exit_group(0) = ? [pid 5238] <... futex resumed>) = ? [pid 5238] +++ exited with 0 +++ [pid 5236] <... sendfile resumed>) = ? [pid 5236] +++ exited with 0 +++ [pid 5237] <... sendfile resumed>) = ? [pid 5237] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./51/binderfs") = 0 umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./51/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./51") = 0 mkdir("./52", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5239 ./strace-static-x86_64: Process 5239 attached [pid 5239] set_robust_list(0x555555cd6760, 24) = 0 [pid 5239] chdir("./52") = 0 [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5239] setpgid(0, 0) = 0 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5239] write(3, "1000", 4) = 4 [pid 5239] close(3) = 0 [pid 5239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5239] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5239] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5239] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5240]}, 88) = 5240 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5239] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5240 attached [pid 5240] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5240] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5240] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5240] memfd_create("syzkaller", 0) = 3 [pid 5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 85.608933][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5240] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5240] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5240] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5240] close(3) = 0 [pid 5240] mkdir("./file1", 0777) = 0 [pid 5240] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5240] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5240] chdir("./file1") = 0 [pid 5240] ioctl(4, LOOP_CLR_FD) = 0 [pid 5240] close(4) = 0 [pid 5240] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... futex resumed>) = 1 [pid 5240] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5240] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... futex resumed>) = 1 [pid 5240] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5240] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... futex resumed>) = 1 [pid 5240] ftruncate(5, 33587195) = 0 [pid 5240] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... futex resumed>) = 1 [ 85.704342][ T5240] loop0: detected capacity change from 0 to 4096 [ 85.714102][ T5240] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 85.727489][ T5240] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 85.739469][ T5240] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5240] sendfile(4, 5, NULL, 281474978811909 [pid 5239] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5239] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5239] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5241]}, 88) = 5241 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5239] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5241 attached [pid 5241] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5241] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5241] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5241] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] <... futex resumed>) = 1 [pid 5241] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5241] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] sendfile(6, 7, NULL, 281474978811909 [pid 5239] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5239] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5239] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5242 attached => {parent_tid=[5242]}, 88) = 5242 [pid 5242] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5239] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5242] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5242] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... futex resumed>) = 1 [pid 5242] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5242] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5242] <... futex resumed>) = 1 [pid 5242] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] exit_group(0 [pid 5242] <... futex resumed>) = ? [pid 5239] <... exit_group resumed>) = ? [pid 5242] +++ exited with 0 +++ [pid 5240] <... sendfile resumed>) = ? [pid 5240] +++ exited with 0 +++ [pid 5241] <... sendfile resumed>) = ? [pid 5241] +++ exited with 0 +++ [pid 5239] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5239, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./52/binderfs") = 0 umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./52/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./52") = 0 mkdir("./53", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5243 attached , child_tidptr=0x555555cd6750) = 5243 [pid 5243] set_robust_list(0x555555cd6760, 24) = 0 [pid 5243] chdir("./53") = 0 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5243] setpgid(0, 0) = 0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5243] write(3, "1000", 4) = 4 [pid 5243] close(3) = 0 [pid 5243] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5243] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.055871][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5243] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5243] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5243] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5243] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5244 attached => {parent_tid=[5244]}, 88) = 5244 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5243] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5244] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5244] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5244] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5244] memfd_create("syzkaller", 0) = 3 [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5244] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5244] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5244] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5244] close(3) = 0 [pid 5244] mkdir("./file1", 0777) = 0 [pid 5244] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5244] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5244] chdir("./file1") = 0 [pid 5244] ioctl(4, LOOP_CLR_FD) = 0 [pid 5244] close(4) = 0 [pid 5244] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5244] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = 0 [pid 5244] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5243] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... open resumed>) = 4 [pid 5244] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5244] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = 0 [pid 5244] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5243] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... open resumed>) = 5 [pid 5244] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5244] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = 0 [pid 5244] ftruncate(5, 33587195 [pid 5243] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... ftruncate resumed>) = 0 [pid 5244] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5244] sendfile(4, 5, NULL, 281474978811909 [pid 5243] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.163441][ T5244] loop0: detected capacity change from 0 to 4096 [ 86.172860][ T5244] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 86.185620][ T5244] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 86.199123][ T5244] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5243] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5243] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5243] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5243] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5245 attached => {parent_tid=[5245]}, 88) = 5245 [pid 5245] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], [pid 5245] <... rseq resumed>) = 0 [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] set_robust_list(0x7fd9a47a49a0, 24 [pid 5243] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... set_robust_list resumed>) = 0 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5245] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5245] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5245] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] sendfile(6, 7, NULL, 281474978811909 [pid 5243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5243] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5243] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5243] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5246 attached => {parent_tid=[5246]}, 88) = 5246 [pid 5246] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], [pid 5246] <... rseq resumed>) = 0 [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5246] set_robust_list(0x7fd9a47839a0, 24 [pid 5243] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... set_robust_list resumed>) = 0 [pid 5243] <... futex resumed>) = 0 [pid 5246] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5246] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5246] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5246] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5246] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] exit_group(0 [pid 5246] <... futex resumed>) = ? [pid 5243] <... exit_group resumed>) = ? [pid 5246] +++ exited with 0 +++ [pid 5245] <... sendfile resumed>) = ? [pid 5245] +++ exited with 0 +++ [pid 5244] <... sendfile resumed>) = ? [pid 5244] +++ exited with 0 +++ [pid 5243] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5243, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./53/binderfs") = 0 umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./53/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./53") = 0 mkdir("./54", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5247 ./strace-static-x86_64: Process 5247 attached [pid 5247] set_robust_list(0x555555cd6760, 24) = 0 [pid 5247] chdir("./54") = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] setpgid(0, 0) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5247] write(3, "1000", 4) = 4 [pid 5247] close(3) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5247] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5247] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5247] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5247] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 86.527535][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5248 attached => {parent_tid=[5248]}, 88) = 5248 [pid 5247] rt_sigprocmask(SIG_SETMASK, [], [pid 5248] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5248] <... rseq resumed>) = 0 [pid 5248] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5248] memfd_create("syzkaller", 0) = 3 [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5248] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5248] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5248] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5248] close(3) = 0 [pid 5248] mkdir("./file1", 0777) = 0 [pid 5248] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5248] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5248] chdir("./file1") = 0 [pid 5248] ioctl(4, LOOP_CLR_FD) = 0 [pid 5248] close(4) = 0 [pid 5248] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = 0 [pid 5248] <... futex resumed>) = 1 [pid 5247] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5248] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5247] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... open resumed>) = 5 [pid 5248] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] ftruncate(5, 33587195 [pid 5247] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... ftruncate resumed>) = 0 [pid 5248] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = 0 [pid 5248] <... futex resumed>) = 1 [pid 5247] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.629191][ T5248] loop0: detected capacity change from 0 to 4096 [ 86.638582][ T5248] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 86.651497][ T5248] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 86.663463][ T5248] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5248] sendfile(4, 5, NULL, 281474978811909 [pid 5247] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5247] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5247] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5247] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5249]}, 88) = 5249 [pid 5247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5247] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5249 attached [pid 5249] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5249] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5249] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5249] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] sendfile(6, 7, NULL, 281474978811909 [pid 5247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5247] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5247] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5247] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5250 attached => {parent_tid=[5250]}, 88) = 5250 [pid 5247] rt_sigprocmask(SIG_SETMASK, [], [pid 5250] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5250] <... rseq resumed>) = 0 [pid 5250] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5250] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5250] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5247] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5250] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5250] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5250] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] exit_group(0 [pid 5250] <... futex resumed>) = ? [pid 5247] <... exit_group resumed>) = ? [pid 5250] +++ exited with 0 +++ [pid 5249] <... sendfile resumed>) = ? [pid 5249] +++ exited with 0 +++ [pid 5248] <... sendfile resumed>) = ? [pid 5248] +++ exited with 0 +++ [pid 5247] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=0, si_stime=42 /* 0.42 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./54/binderfs") = 0 umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./54/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./54") = 0 mkdir("./55", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5251 ./strace-static-x86_64: Process 5251 attached [pid 5251] set_robust_list(0x555555cd6760, 24) = 0 [pid 5251] chdir("./55") = 0 [pid 5251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5251] setpgid(0, 0) = 0 [pid 5251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5251] write(3, "1000", 4) = 4 [pid 5251] close(3) = 0 [pid 5251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5251] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5251] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5251] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5252]}, 88) = 5252 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5251] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5252 attached [pid 5252] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [ 87.055868][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5252] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5252] memfd_create("syzkaller", 0) = 3 [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5252] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5252] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5252] close(3) = 0 [pid 5252] mkdir("./file1", 0777) = 0 [pid 5252] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5252] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5252] chdir("./file1") = 0 [pid 5252] ioctl(4, LOOP_CLR_FD) = 0 [pid 5252] close(4) = 0 [pid 5252] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5251] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5252] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5251] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5252] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5251] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] ftruncate(5, 33587195) = 0 [pid 5252] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5251] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 87.157027][ T5252] loop0: detected capacity change from 0 to 4096 [ 87.167481][ T5252] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 87.181080][ T5252] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 87.196512][ T5252] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5252] sendfile(4, 5, NULL, 281474978811909 [pid 5251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5251] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5251] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5251] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5253]}, 88) = 5253 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5251] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5253 attached [pid 5253] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5253] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5253] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5253] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... futex resumed>) = 0 [pid 5251] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... futex resumed>) = 1 [pid 5253] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5253] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... futex resumed>) = 0 [pid 5251] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... futex resumed>) = 1 [pid 5253] sendfile(6, 7, NULL, 281474978811909 [pid 5251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5251] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5251] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5251] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5254]}, 88) = 5254 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5251] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5254 attached [pid 5254] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5254] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5254] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5254] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5254] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5251] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] <... fallocate resumed>) = 0 [pid 5254] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... futex resumed>) = 0 [pid 5254] <... futex resumed>) = 1 [pid 5254] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] exit_group(0 [pid 5254] <... futex resumed>) = ? [pid 5251] <... exit_group resumed>) = ? [pid 5254] +++ exited with 0 +++ [pid 5252] <... sendfile resumed>) = ? [pid 5252] +++ exited with 0 +++ [pid 5253] <... sendfile resumed>) = ? [pid 5253] +++ exited with 0 +++ [pid 5251] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5251, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./55/binderfs") = 0 umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./55/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./55") = 0 mkdir("./56", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5255 ./strace-static-x86_64: Process 5255 attached [pid 5255] set_robust_list(0x555555cd6760, 24) = 0 [pid 5255] chdir("./56") = 0 [pid 5255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5255] setpgid(0, 0) = 0 [pid 5255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5255] write(3, "1000", 4) = 4 [pid 5255] close(3) = 0 [pid 5255] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5255] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 87.524936][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5255] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5255] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5255] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5255] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5256]}, 88) = 5256 ./strace-static-x86_64: Process 5256 attached [pid 5256] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5256] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5256] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5255] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5256] <... futex resumed>) = 0 [pid 5255] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5256] memfd_create("syzkaller", 0) = 3 [pid 5256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5256] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5256] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5256] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5256] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5256] close(3) = 0 [pid 5256] mkdir("./file1", 0777) = 0 [ 87.628511][ T5256] loop0: detected capacity change from 0 to 4096 [ 87.649298][ T5256] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 87.665213][ T5256] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 5256] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5256] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5256] chdir("./file1") = 0 [pid 5256] ioctl(4, LOOP_CLR_FD) = 0 [pid 5256] close(4) = 0 [pid 5256] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5256] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] <... futex resumed>) = 0 [pid 5255] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = 0 [pid 5255] <... futex resumed>) = 1 [pid 5256] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5255] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] <... open resumed>) = 4 [pid 5256] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5255] <... futex resumed>) = 0 [pid 5256] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5255] <... futex resumed>) = 0 [pid 5256] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5255] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] <... open resumed>) = 5 [pid 5256] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5255] <... futex resumed>) = 0 [pid 5256] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5255] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] ftruncate(5, 33587195) = 0 [pid 5256] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5255] <... futex resumed>) = 0 [pid 5256] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 87.679482][ T5256] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5256] sendfile(4, 5, NULL, 281474978811909 [pid 5255] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5255] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5255] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5255] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5257]}, 88) = 5257 [pid 5255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5255] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5257 attached [pid 5257] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5257] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5257] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5257] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5257] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 0 [pid 5255] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... futex resumed>) = 1 [pid 5257] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5257] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 0 [pid 5255] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... futex resumed>) = 1 [pid 5257] sendfile(6, 7, NULL, 281474978811909 [pid 5255] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5255] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5255] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5255] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5255] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5258]}, 88) = 5258 [pid 5255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5255] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5258 attached [pid 5258] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5258] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5258] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5258] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 0 [pid 5255] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] <... futex resumed>) = 1 [pid 5258] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5258] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5255] <... futex resumed>) = 0 [pid 5258] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] exit_group(0) = ? [pid 5258] <... futex resumed>) = ? [pid 5258] +++ exited with 0 +++ [pid 5257] <... sendfile resumed>) = ? [pid 5256] <... sendfile resumed>) = ? [pid 5257] +++ exited with 0 +++ [pid 5256] +++ exited with 0 +++ [pid 5255] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5255, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./56/binderfs") = 0 umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./56/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./56") = 0 mkdir("./57", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5259 ./strace-static-x86_64: Process 5259 attached [pid 5259] set_robust_list(0x555555cd6760, 24) = 0 [pid 5259] chdir("./57") = 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5259] setpgid(0, 0) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5259] close(3) = 0 [pid 5259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5259] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5259] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5259] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [ 88.007646][ T12] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5260 attached => {parent_tid=[5260]}, 88) = 5260 [pid 5260] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5260] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5260] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5259] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5259] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5260] memfd_create("syzkaller", 0) = 3 [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5260] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5260] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5260] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5260] close(3) = 0 [pid 5260] mkdir("./file1", 0777) = 0 [pid 5260] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5260] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5260] chdir("./file1") = 0 [pid 5260] ioctl(4, LOOP_CLR_FD) = 0 [pid 5260] close(4) = 0 [pid 5260] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5260] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [ 88.109842][ T5260] loop0: detected capacity change from 0 to 4096 [ 88.119805][ T5260] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 88.133516][ T5260] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 88.147998][ T5260] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5260] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... open resumed>) = 5 [pid 5260] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5260] ftruncate(5, 33587195 [pid 5259] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... ftruncate resumed>) = 0 [pid 5260] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] sendfile(4, 5, NULL, 281474978811909 [pid 5259] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5259] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5259] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5259] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5261 attached => {parent_tid=[5261]}, 88) = 5261 [pid 5261] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5261] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5261] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5261] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5259] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = 0 [pid 5259] <... futex resumed>) = 1 [pid 5261] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5259] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] <... open resumed>) = 6 [pid 5261] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5261] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] <... futex resumed>) = 0 [pid 5261] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5259] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] <... open resumed>) = 7 [pid 5261] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5261] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] <... futex resumed>) = 0 [pid 5261] sendfile(6, 7, NULL, 281474978811909 [pid 5259] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5259] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5259] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5262 attached => {parent_tid=[5262]}, 88) = 5262 [pid 5262] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5262] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5262] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5262] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5259] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5259] <... futex resumed>) = 1 [pid 5262] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5259] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... open resumed>) = 8 [pid 5262] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... futex resumed>) = 1 [pid 5262] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5262] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5262] <... futex resumed>) = 1 [pid 5262] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] exit_group(0 [pid 5262] <... futex resumed>) = ? [pid 5259] <... exit_group resumed>) = ? [pid 5262] +++ exited with 0 +++ [pid 5261] <... sendfile resumed>) = ? [pid 5261] +++ exited with 0 +++ [pid 5260] <... sendfile resumed>) = ? [pid 5260] +++ exited with 0 +++ [pid 5259] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./57/binderfs") = 0 umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./57/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./57") = 0 mkdir("./58", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5263 ./strace-static-x86_64: Process 5263 attached [pid 5263] set_robust_list(0x555555cd6760, 24) = 0 [pid 5263] chdir("./58") = 0 [pid 5263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5263] setpgid(0, 0) = 0 [pid 5263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5263] write(3, "1000", 4) = 4 [pid 5263] close(3) = 0 [pid 5263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5263] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5263] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5263] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5264 attached [pid 5264] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5263] <... clone3 resumed> => {parent_tid=[5264]}, 88) = 5264 [pid 5264] <... rseq resumed>) = 0 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] set_robust_list(0x7fd9ac9c59a0, 24 [pid 5263] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5264] <... set_robust_list resumed>) = 0 [pid 5263] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] rt_sigprocmask(SIG_SETMASK, [], [pid 5263] <... futex resumed>) = 0 [pid 5264] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5263] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5264] memfd_create("syzkaller", 0) = 3 [pid 5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 88.496713][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5264] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5264] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5264] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5264] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5264] close(3) = 0 [pid 5264] mkdir("./file1", 0777) = 0 [ 88.590700][ T5264] loop0: detected capacity change from 0 to 4096 [ 88.611293][ T5264] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 88.627011][ T5264] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 5264] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5264] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5264] chdir("./file1") = 0 [pid 5264] ioctl(4, LOOP_CLR_FD) = 0 [pid 5264] close(4) = 0 [pid 5264] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5264] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5264] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] ftruncate(5, 33587195) = 0 [pid 5264] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 88.643933][ T5264] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5264] sendfile(4, 5, NULL, 281474978811909 [pid 5263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5263] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5263] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5265]}, 88) = 5265 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5263] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5265 attached [pid 5265] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5265] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5265] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5265] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5265] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] <... futex resumed>) = 1 [pid 5265] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5265] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] <... futex resumed>) = 1 [pid 5265] sendfile(6, 7, NULL, 281474978811909 [pid 5263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5263] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5263] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5263] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5266]}, 88) = 5266 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5263] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5266 attached [pid 5266] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5266] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5266] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5266] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5266] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] <... futex resumed>) = 1 [pid 5266] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5266] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5266] <... futex resumed>) = 1 [pid 5266] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] exit_group(0 [pid 5266] <... futex resumed>) = ? [pid 5263] <... exit_group resumed>) = ? [pid 5266] +++ exited with 0 +++ [pid 5264] <... sendfile resumed>) = ? [pid 5265] <... sendfile resumed>) = ? [pid 5264] +++ exited with 0 +++ [pid 5265] +++ exited with 0 +++ [pid 5263] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5263, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./58/binderfs") = 0 umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./58/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./58") = 0 mkdir("./59", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5267 ./strace-static-x86_64: Process 5267 attached [pid 5267] set_robust_list(0x555555cd6760, 24) = 0 [pid 5267] chdir("./59") = 0 [pid 5267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5267] setpgid(0, 0) = 0 [pid 5267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5267] write(3, "1000", 4) = 4 [pid 5267] close(3) = 0 [ 88.953296][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5267] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5267] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5267] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5267] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5267] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5267] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5268 attached => {parent_tid=[5268]}, 88) = 5268 [pid 5267] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5267] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5268] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5268] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5268] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5268] memfd_create("syzkaller", 0) = 3 [pid 5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5268] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5268] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5268] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5268] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5268] close(3) = 0 [pid 5268] mkdir("./file1", 0777) = 0 [pid 5268] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5268] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5268] chdir("./file1") = 0 [pid 5268] ioctl(4, LOOP_CLR_FD) = 0 [pid 5268] close(4) = 0 [pid 5268] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... futex resumed>) = 0 [pid 5267] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5268] <... futex resumed>) = 1 [pid 5268] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5268] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... futex resumed>) = 0 [pid 5267] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5268] <... futex resumed>) = 1 [pid 5268] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5268] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5267] <... futex resumed>) = 0 [pid 5268] ftruncate(5, 33587195 [pid 5267] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... ftruncate resumed>) = 0 [pid 5267] <... futex resumed>) = 0 [pid 5268] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5268] <... futex resumed>) = 0 [pid 5267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] sendfile(4, 5, NULL, 281474978811909 [pid 5267] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 89.075830][ T5268] loop0: detected capacity change from 0 to 4096 [ 89.085737][ T5268] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 89.098322][ T5268] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 89.110776][ T5268] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5267] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5267] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5267] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5267] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5267] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5269]}, 88) = 5269 [pid 5267] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5267] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5269 attached [pid 5269] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5269] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5269] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5269] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5269] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... futex resumed>) = 0 [pid 5267] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... futex resumed>) = 1 [pid 5269] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5269] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... futex resumed>) = 0 [pid 5267] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... futex resumed>) = 1 [pid 5269] sendfile(6, 7, NULL, 281474978811909 [pid 5267] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5267] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5267] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5267] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5267] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5270]}, 88) = 5270 [pid 5267] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5267] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5270 attached [pid 5270] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5270] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5270] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5270] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5270] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... futex resumed>) = 0 [pid 5267] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5270] <... futex resumed>) = 1 [pid 5270] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5270] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... futex resumed>) = 0 [pid 5270] <... futex resumed>) = 1 [pid 5270] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5267] exit_group(0) = ? [pid 5270] <... futex resumed>) = ? [pid 5270] +++ exited with 0 +++ [pid 5268] <... sendfile resumed>) = ? [pid 5268] +++ exited with 0 +++ [pid 5269] <... sendfile resumed>) = ? [pid 5269] +++ exited with 0 +++ [pid 5267] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5267, si_uid=0, si_status=0, si_utime=0, si_stime=48 /* 0.48 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./59/binderfs") = 0 umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./59/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./59") = 0 mkdir("./60", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5271 ./strace-static-x86_64: Process 5271 attached [pid 5271] set_robust_list(0x555555cd6760, 24) = 0 [pid 5271] chdir("./60") = 0 [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] setpgid(0, 0) = 0 [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5271] write(3, "1000", 4) = 4 [pid 5271] close(3) = 0 [pid 5271] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5271] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5271] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5271] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5271] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5272]}, 88) = 5272 [ 89.467626][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. ./strace-static-x86_64: Process 5272 attached [pid 5272] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5272] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5272] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5271] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5271] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5272] memfd_create("syzkaller", 0) = 3 [pid 5272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5272] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5272] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5272] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5272] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5272] close(3) = 0 [pid 5272] mkdir("./file1", 0777) = 0 [pid 5272] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5272] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5272] chdir("./file1") = 0 [pid 5272] ioctl(4, LOOP_CLR_FD) = 0 [pid 5272] close(4) = 0 [pid 5272] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5271] <... futex resumed>) = 0 [pid 5271] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5272] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = 0 [pid 5271] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... futex resumed>) = 1 [pid 5272] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5272] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... futex resumed>) = 0 [pid 5271] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... futex resumed>) = 1 [pid 5272] ftruncate(5, 33587195) = 0 [pid 5272] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5271] <... futex resumed>) = 0 [pid 5271] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 89.568893][ T5272] loop0: detected capacity change from 0 to 4096 [ 89.578133][ T5272] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 89.590994][ T5272] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 89.606104][ T5272] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5272] sendfile(4, 5, NULL, 281474978811909 [pid 5271] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5271] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5271] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5271] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5273 attached [pid 5273] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5271] <... clone3 resumed> => {parent_tid=[5273]}, 88) = 5273 [pid 5273] <... rseq resumed>) = 0 [pid 5271] rt_sigprocmask(SIG_SETMASK, [], [pid 5273] set_robust_list(0x7fd9a47a49a0, 24 [pid 5271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5273] <... set_robust_list resumed>) = 0 [pid 5271] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] rt_sigprocmask(SIG_SETMASK, [], [pid 5271] <... futex resumed>) = 0 [pid 5273] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5271] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5273] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5271] <... futex resumed>) = 0 [pid 5273] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5271] <... futex resumed>) = 0 [pid 5273] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5271] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] <... open resumed>) = 7 [pid 5273] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5271] <... futex resumed>) = 0 [pid 5271] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] sendfile(6, 7, NULL, 281474978811909 [pid 5271] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5271] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5271] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5271] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5271] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5274]}, 88) = 5274 [pid 5271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5271] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5271] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5274 attached [pid 5274] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5274] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5274] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5274] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5274] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5271] <... futex resumed>) = 0 [pid 5274] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... futex resumed>) = 0 [pid 5271] <... futex resumed>) = 1 [pid 5274] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5271] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... fallocate resumed>) = 0 [pid 5274] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5271] <... futex resumed>) = 0 [pid 5274] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] exit_group(0) = ? [pid 5274] <... futex resumed>) = ? [pid 5274] +++ exited with 0 +++ [pid 5273] <... sendfile resumed>) = ? [pid 5272] <... sendfile resumed>) = ? [pid 5273] +++ exited with 0 +++ [pid 5272] +++ exited with 0 +++ [pid 5271] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=0, si_stime=40 /* 0.40 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./60/binderfs") = 0 umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./60/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./60") = 0 mkdir("./61", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5275 ./strace-static-x86_64: Process 5275 attached [pid 5275] set_robust_list(0x555555cd6760, 24) = 0 [pid 5275] chdir("./61") = 0 [pid 5275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5275] setpgid(0, 0) = 0 [pid 5275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5275] write(3, "1000", 4) = 4 [pid 5275] close(3) = 0 [pid 5275] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5275] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5275] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5275] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5275] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5276]}, 88) = 5276 [pid 5275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5275] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 89.960109][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5275] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5276 attached [pid 5276] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5276] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5276] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5276] memfd_create("syzkaller", 0) = 3 [pid 5276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5276] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5276] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5276] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5276] close(3) = 0 [pid 5276] mkdir("./file1", 0777) = 0 [pid 5276] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5276] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5276] chdir("./file1") = 0 [pid 5276] ioctl(4, LOOP_CLR_FD) = 0 [pid 5276] close(4) = 0 [pid 5276] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5275] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5276] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5275] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] <... futex resumed>) = 1 [pid 5276] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5276] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5275] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] ftruncate(5, 33587195) = 0 [pid 5276] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5275] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.062607][ T5276] loop0: detected capacity change from 0 to 4096 [ 90.073525][ T5276] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 90.088560][ T5276] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 90.103570][ T5276] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5275] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] sendfile(4, 5, NULL, 281474978811909 [pid 5275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5275] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5275] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5275] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5277]}, 88) = 5277 [pid 5275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5275] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5277 attached [pid 5277] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5277] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5277] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5277] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5275] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... futex resumed>) = 1 [pid 5277] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5277] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5275] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] <... futex resumed>) = 1 [pid 5277] sendfile(6, 7, NULL, 281474978811909 [pid 5275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5275] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5275] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5275] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5275] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5275] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5278]}, 88) = 5278 [pid 5275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5275] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5278 attached [pid 5278] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5278] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5278] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5278] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5278] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5275] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5275] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5278] <... futex resumed>) = 1 [pid 5278] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5278] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5278] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] exit_group(0) = ? [pid 5278] <... futex resumed>) = ? [pid 5278] +++ exited with 0 +++ [pid 5276] <... sendfile resumed>) = ? [pid 5276] +++ exited with 0 +++ [pid 5277] <... sendfile resumed>) = ? [pid 5277] +++ exited with 0 +++ [pid 5275] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5275, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./61/binderfs") = 0 umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./61/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./61") = 0 mkdir("./62", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5279 attached , child_tidptr=0x555555cd6750) = 5279 [pid 5279] set_robust_list(0x555555cd6760, 24) = 0 [pid 5279] chdir("./62") = 0 [pid 5279] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5279] setpgid(0, 0) = 0 [pid 5279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5279] write(3, "1000", 4) = 4 [pid 5279] close(3) = 0 [pid 5279] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5279] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5279] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5279] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [ 90.428577][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5279] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5279] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5280 attached => {parent_tid=[5280]}, 88) = 5280 [pid 5280] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5279] rt_sigprocmask(SIG_SETMASK, [], [pid 5280] <... rseq resumed>) = 0 [pid 5280] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5280] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5280] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5279] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = 0 [pid 5279] <... futex resumed>) = 1 [pid 5279] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5280] memfd_create("syzkaller", 0) = 3 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5280] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5280] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5280] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5280] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5280] close(3) = 0 [pid 5280] mkdir("./file1", 0777) = 0 [pid 5280] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5280] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5280] chdir("./file1") = 0 [pid 5280] ioctl(4, LOOP_CLR_FD) = 0 [pid 5280] close(4) = 0 [pid 5280] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5280] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5280] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] ftruncate(5, 33587195) = 0 [pid 5280] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] sendfile(4, 5, NULL, 281474978811909 [ 90.532314][ T5280] loop0: detected capacity change from 0 to 4096 [ 90.541336][ T5280] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 90.555956][ T5280] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 90.570727][ T5280] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5279] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5279] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5279] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5279] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5279] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5279] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5281]}, 88) = 5281 [pid 5279] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5279] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5281 attached [pid 5281] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5281] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5281] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5281] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5281] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] <... futex resumed>) = 1 [pid 5281] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5281] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] <... futex resumed>) = 1 [pid 5281] sendfile(6, 7, NULL, 281474978811909 [pid 5279] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5279] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5279] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5279] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5279] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5282 attached => {parent_tid=[5282]}, 88) = 5282 [pid 5279] rt_sigprocmask(SIG_SETMASK, [], [pid 5282] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5279] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... rseq resumed>) = 0 [pid 5282] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5282] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5282] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5279] <... futex resumed>) = 0 [pid 5279] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5282] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = 0 [pid 5282] <... futex resumed>) = 1 [pid 5282] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5279] exit_group(0 [pid 5282] <... futex resumed>) = ? [pid 5279] <... exit_group resumed>) = ? [pid 5281] <... sendfile resumed>) = ? [pid 5282] +++ exited with 0 +++ [pid 5281] +++ exited with 0 +++ [pid 5280] <... sendfile resumed>) = ? [pid 5280] +++ exited with 0 +++ [pid 5279] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5279, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./62/binderfs") = 0 umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./62/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./62") = 0 mkdir("./63", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5283 ./strace-static-x86_64: Process 5283 attached [ 90.891940][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5283] set_robust_list(0x555555cd6760, 24) = 0 [pid 5283] chdir("./63") = 0 [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5283] setpgid(0, 0) = 0 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5283] write(3, "1000", 4) = 4 [pid 5283] close(3) = 0 [pid 5283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5283] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5283] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5283] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5284]}, 88) = 5284 ./strace-static-x86_64: Process 5284 attached [pid 5284] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5284] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5284] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5284] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5283] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5283] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5284] memfd_create("syzkaller", 0) = 3 [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5284] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5284] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5284] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5284] close(3) = 0 [pid 5284] mkdir("./file1", 0777) = 0 [pid 5284] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5284] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5284] chdir("./file1") = 0 [pid 5284] ioctl(4, LOOP_CLR_FD) = 0 [pid 5284] close(4) = 0 [pid 5284] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] <... futex resumed>) = 0 [pid 5283] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5284] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... futex resumed>) = 0 [pid 5283] <... futex resumed>) = 1 [pid 5283] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5284] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... futex resumed>) = 0 [pid 5284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] ftruncate(5, 33587195) = 0 [pid 5284] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5284] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5283] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5284] <... futex resumed>) = 0 [ 91.010185][ T5284] loop0: detected capacity change from 0 to 4096 [ 91.019342][ T5284] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 91.033142][ T5284] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 91.045781][ T5284] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5284] sendfile(4, 5, NULL, 281474978811909 [pid 5283] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5283] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5283] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5285]}, 88) = 5285 [pid 5283] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5283] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5285 attached [pid 5285] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5285] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5285] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5285] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5285] <... futex resumed>) = 1 [pid 5283] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5285] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5285] <... futex resumed>) = 1 [pid 5283] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5285] sendfile(6, 7, NULL, 281474978811909 [pid 5283] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5283] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5283] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5283] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5286]}, 88) = 5286 [pid 5283] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5283] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5286 attached [pid 5286] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5286] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5286] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5286] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5283] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5286] <... futex resumed>) = 1 [pid 5286] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5286] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 0 [pid 5286] <... futex resumed>) = 1 [pid 5286] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] exit_group(0 [pid 5286] <... futex resumed>) = ? [pid 5283] <... exit_group resumed>) = ? [pid 5286] +++ exited with 0 +++ [pid 5285] <... sendfile resumed>) = ? [pid 5285] +++ exited with 0 +++ [pid 5284] <... sendfile resumed>) = ? [pid 5284] +++ exited with 0 +++ [pid 5283] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5283, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=38 /* 0.38 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./63/binderfs") = 0 umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./63/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./63") = 0 mkdir("./64", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5287 ./strace-static-x86_64: Process 5287 attached [pid 5287] set_robust_list(0x555555cd6760, 24) = 0 [pid 5287] chdir("./64") = 0 [pid 5287] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5287] setpgid(0, 0) = 0 [pid 5287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5287] write(3, "1000", 4) = 4 [pid 5287] close(3) = 0 [pid 5287] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5287] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5287] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5287] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5287] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5287] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5288]}, 88) = 5288 [pid 5287] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5287] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 91.371135][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5287] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5288 attached [pid 5288] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5288] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5288] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5288] memfd_create("syzkaller", 0) = 3 [pid 5288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5288] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5288] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5288] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5288] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5288] close(3) = 0 [pid 5288] mkdir("./file1", 0777) = 0 [pid 5288] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5288] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5288] chdir("./file1") = 0 [pid 5288] ioctl(4, LOOP_CLR_FD) = 0 [pid 5288] close(4) = 0 [pid 5288] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5288] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5287] <... futex resumed>) = 0 [pid 5287] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5287] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5288] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5287] <... futex resumed>) = 0 [pid 5288] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5287] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... open resumed>) = 5 [pid 5287] <... futex resumed>) = 0 [pid 5288] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] <... futex resumed>) = 0 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] ftruncate(5, 33587195 [pid 5287] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... ftruncate resumed>) = 0 [pid 5287] <... futex resumed>) = 0 [pid 5288] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] <... futex resumed>) = 0 [pid 5287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5287] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [ 91.466736][ T5288] loop0: detected capacity change from 0 to 4096 [ 91.476476][ T5288] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 91.491242][ T5288] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 91.506744][ T5288] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5288] sendfile(4, 5, NULL, 281474978811909 [pid 5287] <... futex resumed>) = 0 [pid 5287] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5287] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5287] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5287] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5287] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5289]}, 88) = 5289 [pid 5287] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5287] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5287] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5289 attached [pid 5289] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5289] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5289] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5289] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5289] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5287] <... futex resumed>) = 0 [pid 5287] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5287] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5289] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5287] <... futex resumed>) = 0 [pid 5287] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] sendfile(6, 7, NULL, 281474978811909 [pid 5287] <... futex resumed>) = 0 [pid 5287] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5287] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5287] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5287] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5290]}, 88) = 5290 [pid 5287] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5290 attached NULL, 8) = 0 [pid 5290] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5287] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... rseq resumed>) = 0 [pid 5287] <... futex resumed>) = 0 [pid 5290] set_robust_list(0x7fd9a47839a0, 24 [pid 5287] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] <... set_robust_list resumed>) = 0 [pid 5290] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5290] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5290] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5287] <... futex resumed>) = 0 [pid 5290] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5287] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5287] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] <... fallocate resumed>) = 0 [pid 5290] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5287] <... futex resumed>) = 0 [pid 5290] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5287] exit_group(0) = ? [pid 5290] <... futex resumed>) = ? [pid 5290] +++ exited with 0 +++ [pid 5288] <... sendfile resumed>) = ? [pid 5288] +++ exited with 0 +++ [pid 5289] <... sendfile resumed>) = ? [pid 5289] +++ exited with 0 +++ [pid 5287] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5287, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./64/binderfs") = 0 umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./64/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./64") = 0 mkdir("./65", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5291 ./strace-static-x86_64: Process 5291 attached [pid 5291] set_robust_list(0x555555cd6760, 24) = 0 [pid 5291] chdir("./65") = 0 [pid 5291] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5291] setpgid(0, 0) = 0 [pid 5291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5291] write(3, "1000", 4) = 4 [pid 5291] close(3) = 0 [pid 5291] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5291] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5291] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5291] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5291] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5291] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5292]}, 88) = 5292 [pid 5291] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5291] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5292 attached [pid 5292] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5292] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5292] memfd_create("syzkaller", 0) = 3 [pid 5292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 91.878694][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5292] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5292] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5292] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5292] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5292] close(3) = 0 [pid 5292] mkdir("./file1", 0777) = 0 [pid 5292] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5292] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5292] chdir("./file1") = 0 [pid 5292] ioctl(4, LOOP_CLR_FD) = 0 [pid 5292] close(4) = 0 [pid 5292] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5291] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5292] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5291] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5292] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5292] ftruncate(5, 33587195 [ 91.965552][ T5292] loop0: detected capacity change from 0 to 4096 [ 91.975248][ T5292] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 91.990309][ T5292] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.005305][ T5292] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5291] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... ftruncate resumed>) = 0 [pid 5291] <... futex resumed>) = 0 [pid 5292] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] <... futex resumed>) = 0 [pid 5291] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] sendfile(4, 5, NULL, 281474978811909 [pid 5291] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5291] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5291] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5291] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5291] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5293]}, 88) = 5293 [pid 5291] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5291] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5293 attached [pid 5293] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5293] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5293] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = 0 [pid 5293] <... futex resumed>) = 1 [pid 5291] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5291] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... open resumed>) = 7 [pid 5293] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = 0 [pid 5293] <... futex resumed>) = 1 [pid 5291] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] sendfile(6, 7, NULL, 281474978811909 [pid 5291] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5291] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5291] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5291] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5291] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5291] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5294 attached => {parent_tid=[5294]}, 88) = 5294 [pid 5294] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5291] rt_sigprocmask(SIG_SETMASK, [], [pid 5294] <... rseq resumed>) = 0 [pid 5291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5291] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5294] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5294] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5291] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5294] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = 0 [pid 5294] <... futex resumed>) = 1 [pid 5294] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5291] exit_group(0 [pid 5294] <... futex resumed>) = ? [pid 5291] <... exit_group resumed>) = ? [pid 5294] +++ exited with 0 +++ [pid 5292] <... sendfile resumed>) = ? [pid 5292] +++ exited with 0 +++ [pid 5293] <... sendfile resumed>) = ? [pid 5293] +++ exited with 0 +++ [pid 5291] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5291, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./65/binderfs") = 0 umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./65/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./65") = 0 mkdir("./66", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5295 ./strace-static-x86_64: Process 5295 attached [pid 5295] set_robust_list(0x555555cd6760, 24) = 0 [pid 5295] chdir("./66") = 0 [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5295] setpgid(0, 0) = 0 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] write(3, "1000", 4) = 4 [ 92.346845][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5295] close(3) = 0 [pid 5295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5295] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5295] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5296 attached [pid 5296] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5296] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5296] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] <... clone3 resumed> => {parent_tid=[5296]}, 88) = 5296 [pid 5295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5295] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5296] <... futex resumed>) = 0 [pid 5295] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5296] memfd_create("syzkaller", 0) = 3 [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5296] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5296] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5296] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5296] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5296] close(3) = 0 [pid 5296] mkdir("./file1", 0777) = 0 [pid 5296] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5296] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5296] chdir("./file1") = 0 [pid 5296] ioctl(4, LOOP_CLR_FD) = 0 [pid 5296] close(4) = 0 [pid 5296] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5296] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] <... futex resumed>) = 1 [pid 5296] ftruncate(5, 33587195) = 0 [pid 5296] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = 0 [pid 5296] <... futex resumed>) = 1 [pid 5295] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 92.456042][ T5296] loop0: detected capacity change from 0 to 4096 [ 92.464952][ T5296] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 92.479500][ T5296] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.495166][ T5296] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5296] sendfile(4, 5, NULL, 281474978811909 [pid 5295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5295] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5297 attached => {parent_tid=[5297]}, 88) = 5297 [pid 5297] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5297] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5297] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5295] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5297] <... futex resumed>) = 0 [pid 5297] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5295] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] <... open resumed>) = 6 [pid 5297] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5297] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5297] <... futex resumed>) = 0 [pid 5297] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5295] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5297] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5295] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5297] <... futex resumed>) = 0 [pid 5295] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] sendfile(6, 7, NULL, 281474978811909 [pid 5295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5295] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5298]}, 88) = 5298 [pid 5295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5295] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5298 attached [pid 5298] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5298] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5298] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5298] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5298] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5298] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = 0 [pid 5298] <... futex resumed>) = 1 [pid 5298] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] exit_group(0 [pid 5298] <... futex resumed>) = ? [pid 5295] <... exit_group resumed>) = ? [pid 5298] +++ exited with 0 +++ [pid 5296] <... sendfile resumed>) = ? [pid 5296] +++ exited with 0 +++ [pid 5297] <... sendfile resumed>) = ? [pid 5297] +++ exited with 0 +++ [pid 5295] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./66/binderfs") = 0 umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./66/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./66") = 0 mkdir("./67", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5299 ./strace-static-x86_64: Process 5299 attached [pid 5299] set_robust_list(0x555555cd6760, 24) = 0 [pid 5299] chdir("./67") = 0 [pid 5299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5299] setpgid(0, 0) = 0 [pid 5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1000", 4) = 4 [pid 5299] close(3) = 0 [pid 5299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5299] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5299] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5300 attached [pid 5300] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5300] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [ 92.814727][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5300] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] <... clone3 resumed> => {parent_tid=[5300]}, 88) = 5300 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5299] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5299] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5300] memfd_create("syzkaller", 0) = 3 [pid 5300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5300] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5300] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5300] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5300] close(3) = 0 [pid 5300] mkdir("./file1", 0777) = 0 [pid 5300] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5300] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5300] chdir("./file1") = 0 [pid 5300] ioctl(4, LOOP_CLR_FD) = 0 [pid 5300] close(4) = 0 [pid 5300] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [pid 5299] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5300] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5299] <... futex resumed>) = 0 [pid 5300] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5300] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5299] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5299] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] ftruncate(5, 33587195) = 0 [pid 5300] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] <... futex resumed>) = 0 [pid 5300] sendfile(4, 5, NULL, 281474978811909 [pid 5299] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 92.914299][ T5300] loop0: detected capacity change from 0 to 4096 [ 92.924685][ T5300] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 92.937851][ T5300] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.950362][ T5300] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5299] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5299] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5299] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5301 attached => {parent_tid=[5301]}, 88) = 5301 [pid 5301] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5301] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5301] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5299] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = 0 [pid 5299] <... futex resumed>) = 1 [pid 5301] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5299] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5301] <... open resumed>) = 6 [pid 5301] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5301] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5301] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] <... futex resumed>) = 0 [pid 5301] sendfile(6, 7, NULL, 281474978811909 [pid 5299] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5299] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5299] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5302 attached => {parent_tid=[5302]}, 88) = 5302 [pid 5302] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5302] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], [pid 5302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5302] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5299] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5302] <... futex resumed>) = 0 [pid 5302] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5299] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... open resumed>) = 8 [pid 5302] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... futex resumed>) = 1 [pid 5302] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5302] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] <... futex resumed>) = 0 [pid 5302] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] exit_group(0 [pid 5302] <... futex resumed>) = ? [pid 5299] <... exit_group resumed>) = ? [pid 5302] +++ exited with 0 +++ [pid 5301] <... sendfile resumed>) = ? [pid 5300] <... sendfile resumed>) = ? [pid 5301] +++ exited with 0 +++ [pid 5300] +++ exited with 0 +++ [pid 5299] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5299, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./67/binderfs") = 0 umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./67/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./67") = 0 mkdir("./68", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5303 ./strace-static-x86_64: Process 5303 attached [pid 5303] set_robust_list(0x555555cd6760, 24) = 0 [pid 5303] chdir("./68") = 0 [pid 5303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5303] setpgid(0, 0) = 0 [pid 5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 93.285574][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5303] write(3, "1000", 4) = 4 [pid 5303] close(3) = 0 [pid 5303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5303] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5303] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5304]}, 88) = 5304 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5303] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5304 attached [pid 5304] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5304] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5304] memfd_create("syzkaller", 0) = 3 [pid 5304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5304] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5304] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5304] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5304] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5304] close(3) = 0 [pid 5304] mkdir("./file1", 0777) = 0 [pid 5304] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5304] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5304] chdir("./file1") = 0 [pid 5304] ioctl(4, LOOP_CLR_FD) = 0 [pid 5304] close(4) = 0 [pid 5304] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5303] <... futex resumed>) = 0 [pid 5303] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5304] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5304] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5303] <... futex resumed>) = 0 [pid 5304] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5303] <... futex resumed>) = 0 [pid 5304] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5303] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5304] <... open resumed>) = 5 [pid 5304] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5303] <... futex resumed>) = 0 [pid 5304] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5303] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] ftruncate(5, 33587195) = 0 [pid 5303] <... futex resumed>) = 0 [pid 5304] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5304] <... futex resumed>) = 0 [pid 5303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5304] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5303] <... futex resumed>) = 0 [ 93.404455][ T5304] loop0: detected capacity change from 0 to 4096 [ 93.415155][ T5304] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 93.430009][ T5304] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 93.445759][ T5304] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5304] sendfile(4, 5, NULL, 281474978811909 [pid 5303] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5303] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5303] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5305]}, 88) = 5305 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5303] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5305 attached [pid 5305] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5305] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5305] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5305] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] <... futex resumed>) = 0 [pid 5303] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5305] <... futex resumed>) = 1 [pid 5305] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5305] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] <... futex resumed>) = 0 [pid 5303] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5305] <... futex resumed>) = 1 [pid 5305] sendfile(6, 7, NULL, 281474978811909 [pid 5303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5303] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5303] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5306 attached => {parent_tid=[5306]}, 88) = 5306 [pid 5306] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5303] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] <... rseq resumed>) = 0 [pid 5306] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5306] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5306] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5306] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] <... futex resumed>) = 0 [pid 5303] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5306] <... futex resumed>) = 0 [pid 5303] <... futex resumed>) = 1 [pid 5306] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5303] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] <... fallocate resumed>) = 0 [pid 5306] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5303] <... futex resumed>) = 0 [pid 5306] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] exit_group(0) = ? [pid 5306] <... futex resumed>) = ? [pid 5306] +++ exited with 0 +++ [pid 5304] <... sendfile resumed>) = ? [pid 5304] +++ exited with 0 +++ [pid 5305] <... sendfile resumed>) = ? [pid 5305] +++ exited with 0 +++ [pid 5303] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5303, si_uid=0, si_status=0, si_utime=0, si_stime=41 /* 0.41 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./68/binderfs") = 0 umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./68/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./68") = 0 mkdir("./69", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5307 ./strace-static-x86_64: Process 5307 attached [pid 5307] set_robust_list(0x555555cd6760, 24) = 0 [pid 5307] chdir("./69") = 0 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5307] setpgid(0, 0) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5307] write(3, "1000", 4) = 4 [pid 5307] close(3) = 0 [pid 5307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5307] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5307] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5308 attached => {parent_tid=[5308]}, 88) = 5308 [pid 5307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5307] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 93.792916][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5307] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5308] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5308] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5308] memfd_create("syzkaller", 0) = 3 [pid 5308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5308] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5308] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5308] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5308] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5308] close(3) = 0 [pid 5308] mkdir("./file1", 0777) = 0 [pid 5308] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5308] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5308] chdir("./file1") = 0 [pid 5308] ioctl(4, LOOP_CLR_FD) = 0 [pid 5308] close(4) = 0 [pid 5308] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] <... futex resumed>) = 0 [pid 5308] <... futex resumed>) = 1 [pid 5307] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5308] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5307] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] <... open resumed>) = 5 [pid 5308] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] ftruncate(5, 33587195) = 0 [pid 5308] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] <... futex resumed>) = 0 [pid 5308] <... futex resumed>) = 1 [pid 5307] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 93.892896][ T5308] loop0: detected capacity change from 0 to 4096 [ 93.903680][ T5308] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 93.918656][ T5308] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 93.934492][ T5308] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5308] sendfile(4, 5, NULL, 281474978811909 [pid 5307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5307] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5307] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5309 attached => {parent_tid=[5309]}, 88) = 5309 [pid 5309] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5309] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5307] rt_sigprocmask(SIG_SETMASK, [], [pid 5309] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5307] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5309] <... futex resumed>) = 0 [pid 5307] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5309] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... futex resumed>) = 1 [pid 5309] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5309] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... futex resumed>) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] sendfile(6, 7, NULL, 281474978811909 [pid 5307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5307] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5307] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5310]}, 88) = 5310 [pid 5307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5307] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5310 attached [pid 5310] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5310] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5310] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5310] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5310] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5307] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] <... fallocate resumed>) = 0 [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5310] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] <... futex resumed>) = 0 [pid 5310] <... futex resumed>) = 1 [pid 5310] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] exit_group(0 [pid 5310] <... futex resumed>) = ? [pid 5307] <... exit_group resumed>) = ? [pid 5310] +++ exited with 0 +++ [pid 5308] <... sendfile resumed>) = ? [pid 5309] <... sendfile resumed>) = ? [pid 5308] +++ exited with 0 +++ [pid 5309] +++ exited with 0 +++ [pid 5307] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=0, si_stime=39 /* 0.39 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./69/binderfs") = 0 umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./69/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./69") = 0 mkdir("./70", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5311 ./strace-static-x86_64: Process 5311 attached [pid 5311] set_robust_list(0x555555cd6760, 24) = 0 [pid 5311] chdir("./70") = 0 [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5311] setpgid(0, 0) = 0 [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5311] write(3, "1000", 4) = 4 [pid 5311] close(3) = 0 [pid 5311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5311] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5311] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5311] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5312 attached => {parent_tid=[5312]}, 88) = 5312 [pid 5312] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5311] rt_sigprocmask(SIG_SETMASK, [], [pid 5312] <... rseq resumed>) = 0 [pid 5312] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 94.253260][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5312] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5311] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5312] <... futex resumed>) = 0 [pid 5311] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5312] memfd_create("syzkaller", 0) = 3 [pid 5312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5312] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5312] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5312] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5312] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5312] close(3) = 0 [pid 5312] mkdir("./file1", 0777) = 0 [pid 5312] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5312] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5312] chdir("./file1") = 0 [pid 5312] ioctl(4, LOOP_CLR_FD) = 0 [pid 5312] close(4) = 0 [pid 5312] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5312] <... futex resumed>) = 1 [pid 5312] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5312] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5312] <... futex resumed>) = 1 [pid 5312] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5312] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5312] <... futex resumed>) = 1 [pid 5312] ftruncate(5, 33587195) = 0 [pid 5312] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5312] <... futex resumed>) = 1 [ 94.351276][ T5312] loop0: detected capacity change from 0 to 4096 [ 94.360955][ T5312] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 94.374688][ T5312] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 94.388144][ T5312] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5312] sendfile(4, 5, NULL, 281474978811909 [pid 5311] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5311] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5311] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5313]}, 88) = 5313 [pid 5311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5311] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5313 attached [pid 5313] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5313] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5313] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5313] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5311] <... futex resumed>) = 0 [pid 5313] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5311] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] <... open resumed>) = 7 [pid 5313] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5313] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5311] <... futex resumed>) = 0 [pid 5313] sendfile(6, 7, NULL, 281474978811909 [pid 5311] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5311] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5311] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5314]}, 88) = 5314 [pid 5311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5311] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5314 attached [pid 5314] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5314] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5314] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5314] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... futex resumed>) = 1 [pid 5314] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5314] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5314] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] exit_group(0 [pid 5314] <... futex resumed>) = ? [pid 5311] <... exit_group resumed>) = ? [pid 5314] +++ exited with 0 +++ [pid 5312] <... sendfile resumed>) = ? [pid 5313] <... sendfile resumed>) = ? [pid 5312] +++ exited with 0 +++ [pid 5313] +++ exited with 0 +++ [pid 5311] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=32 /* 0.32 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./70/binderfs") = 0 umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./70/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./70") = 0 mkdir("./71", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5315 ./strace-static-x86_64: Process 5315 attached [pid 5315] set_robust_list(0x555555cd6760, 24) = 0 [pid 5315] chdir("./71") = 0 [pid 5315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5315] setpgid(0, 0) = 0 [pid 5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5315] write(3, "1000", 4) = 4 [pid 5315] close(3) = 0 [pid 5315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5315] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5315] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5315] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5316]}, 88) = 5316 [pid 5315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5315] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5316 attached [pid 5316] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5316] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5316] memfd_create("syzkaller", 0) = 3 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 94.718733][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5316] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5316] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5316] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5316] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5316] close(3) = 0 [pid 5316] mkdir("./file1", 0777) = 0 [pid 5316] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5316] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5316] chdir("./file1") = 0 [pid 5316] ioctl(4, LOOP_CLR_FD) = 0 [pid 5316] close(4) = 0 [pid 5316] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [pid 5315] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] <... futex resumed>) = 1 [pid 5316] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5316] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [pid 5316] <... futex resumed>) = 1 [pid 5315] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5316] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [pid 5315] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] <... futex resumed>) = 1 [pid 5316] ftruncate(5, 33587195) = 0 [pid 5316] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [pid 5315] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] <... futex resumed>) = 1 [ 94.803916][ T5316] loop0: detected capacity change from 0 to 4096 [ 94.813120][ T5316] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 94.827243][ T5316] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 94.842515][ T5316] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5316] sendfile(4, 5, NULL, 281474978811909 [pid 5315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5315] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5315] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5317]}, 88) = 5317 [pid 5315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5315] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5317 attached [pid 5317] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5317] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5317] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5317] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [pid 5315] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5317] <... futex resumed>) = 1 [pid 5317] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5317] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [pid 5315] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5317] <... futex resumed>) = 1 [pid 5317] sendfile(6, 7, NULL, 281474978811909 [pid 5315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5315] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5315] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5318]}, 88) = 5318 [pid 5315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5315] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5318 attached [pid 5318] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5318] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5318] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5318] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5318] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] <... futex resumed>) = 0 [pid 5315] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5315] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5318] <... futex resumed>) = 0 [pid 5318] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5318] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5318] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5315] exit_group(0 [pid 5318] <... futex resumed>) = ? [pid 5317] <... sendfile resumed>) = ? [pid 5315] <... exit_group resumed>) = ? [pid 5318] +++ exited with 0 +++ [pid 5317] +++ exited with 0 +++ [pid 5316] <... sendfile resumed>) = ? [pid 5316] +++ exited with 0 +++ [pid 5315] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./71/binderfs") = 0 umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./71/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./71") = 0 mkdir("./72", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5319 ./strace-static-x86_64: Process 5319 attached [pid 5319] set_robust_list(0x555555cd6760, 24) = 0 [pid 5319] chdir("./72") = 0 [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5319] setpgid(0, 0) = 0 [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5319] write(3, "1000", 4) = 4 [pid 5319] close(3) = 0 [pid 5319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5319] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5319] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5320 attached [pid 5320] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5320] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5320] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] <... clone3 resumed> => {parent_tid=[5320]}, 88) = 5320 [pid 5319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5319] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5319] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 95.159045][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5320] memfd_create("syzkaller", 0) = 3 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5320] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5320] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5320] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5320] close(3) = 0 [pid 5320] mkdir("./file1", 0777) = 0 [pid 5320] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5320] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5320] chdir("./file1") = 0 [pid 5320] ioctl(4, LOOP_CLR_FD) = 0 [pid 5320] close(4) = 0 [pid 5320] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... futex resumed>) = 1 [pid 5320] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5320] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... futex resumed>) = 1 [pid 5320] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5320] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... futex resumed>) = 1 [pid 5320] ftruncate(5, 33587195) = 0 [pid 5320] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5319] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... futex resumed>) = 1 [ 95.255111][ T5320] loop0: detected capacity change from 0 to 4096 [ 95.265065][ T5320] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 95.277775][ T5320] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 95.291137][ T5320] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5320] sendfile(4, 5, NULL, 281474978811909 [pid 5319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5319] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5319] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5321 attached => {parent_tid=[5321]}, 88) = 5321 [pid 5321] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5321] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5321] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5319] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5321] <... futex resumed>) = 0 [pid 5319] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5321] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5321] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5319] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] <... open resumed>) = 7 [pid 5321] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5321] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] <... futex resumed>) = 0 [pid 5321] sendfile(6, 7, NULL, 281474978811909 [pid 5319] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5319] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5319] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5322]}, 88) = 5322 ./strace-static-x86_64: Process 5322 attached [pid 5319] rt_sigprocmask(SIG_SETMASK, [], [pid 5322] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5322] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5322] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5319] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5322] <... futex resumed>) = 0 [pid 5322] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5322] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5322] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] <... futex resumed>) = 0 [pid 5319] <... futex resumed>) = 1 [pid 5322] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5319] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5322] <... fallocate resumed>) = 0 [pid 5322] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5322] <... futex resumed>) = 1 [pid 5322] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] exit_group(0 [pid 5322] <... futex resumed>) = ? [pid 5319] <... exit_group resumed>) = ? [pid 5322] +++ exited with 0 +++ [pid 5320] <... sendfile resumed>) = ? [pid 5321] <... sendfile resumed>) = ? [pid 5320] +++ exited with 0 +++ [pid 5321] +++ exited with 0 +++ [pid 5319] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./72/binderfs") = 0 umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./72/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./72") = 0 mkdir("./73", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5323 ./strace-static-x86_64: Process 5323 attached [pid 5323] set_robust_list(0x555555cd6760, 24) = 0 [pid 5323] chdir("./73") = 0 [ 95.614473][ T57] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5323] setpgid(0, 0) = 0 [pid 5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5323] write(3, "1000", 4) = 4 [pid 5323] close(3) = 0 [pid 5323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5323] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5323] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5323] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5323] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5324]}, 88) = 5324 [pid 5323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5323] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5324 attached [pid 5324] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5324] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5324] memfd_create("syzkaller", 0) = 3 [pid 5324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5324] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5324] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5324] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5324] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5324] close(3) = 0 [pid 5324] mkdir("./file1", 0777) = 0 [pid 5324] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5324] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5324] chdir("./file1") = 0 [pid 5324] ioctl(4, LOOP_CLR_FD) = 0 [pid 5324] close(4) = 0 [pid 5324] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5324] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] <... futex resumed>) = 0 [pid 5324] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5323] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... open resumed>) = 4 [pid 5324] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5324] <... futex resumed>) = 1 [pid 5323] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... open resumed>) = 5 [pid 5324] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5324] <... futex resumed>) = 1 [pid 5323] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] ftruncate(5, 33587195 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... ftruncate resumed>) = 0 [pid 5324] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5324] <... futex resumed>) = 1 [pid 5323] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] sendfile(4, 5, NULL, 281474978811909 [pid 5323] <... futex resumed>) = 0 [ 95.724066][ T5324] loop0: detected capacity change from 0 to 4096 [ 95.733533][ T5324] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 95.749406][ T5324] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 95.765328][ T5324] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5323] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5323] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5323] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5323] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5325]}, 88) = 5325 ./strace-static-x86_64: Process 5325 attached [pid 5323] rt_sigprocmask(SIG_SETMASK, [], [pid 5325] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5325] <... rseq resumed>) = 0 [pid 5323] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] set_robust_list(0x7fd9a47a49a0, 24 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] <... set_robust_list resumed>) = 0 [pid 5325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5325] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5325] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5325] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] sendfile(6, 7, NULL, 281474978811909 [pid 5323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5323] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5323] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5323] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5326 attached => {parent_tid=[5326]}, 88) = 5326 [pid 5323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5323] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5323] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5326] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5326] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5326] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5326] <... futex resumed>) = 1 [pid 5323] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] <... fallocate resumed>) = 0 [pid 5326] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [pid 5326] <... futex resumed>) = 1 [pid 5326] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] exit_group(0) = ? [pid 5326] <... futex resumed>) = ? [pid 5326] +++ exited with 0 +++ [pid 5324] <... sendfile resumed>) = ? [pid 5324] +++ exited with 0 +++ [pid 5325] <... sendfile resumed>) = ? [pid 5325] +++ exited with 0 +++ [pid 5323] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5323, si_uid=0, si_status=0, si_utime=0, si_stime=40 /* 0.40 s */} --- umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./73/binderfs") = 0 umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./73/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./73") = 0 mkdir("./74", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5327 ./strace-static-x86_64: Process 5327 attached [pid 5327] set_robust_list(0x555555cd6760, 24) = 0 [pid 5327] chdir("./74") = 0 [ 96.086015][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5327] setpgid(0, 0) = 0 [pid 5327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5327] write(3, "1000", 4) = 4 [pid 5327] close(3) = 0 [pid 5327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5327] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5327] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5327] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5328 attached => {parent_tid=[5328]}, 88) = 5328 [pid 5328] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5328] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5328] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5327] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5328] <... futex resumed>) = 0 [pid 5327] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5328] memfd_create("syzkaller", 0) = 3 [pid 5328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5328] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5328] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5328] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5328] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5328] close(3) = 0 [pid 5328] mkdir("./file1", 0777) = 0 [pid 5328] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5328] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5328] chdir("./file1") = 0 [pid 5328] ioctl(4, LOOP_CLR_FD) = 0 [pid 5328] close(4) = 0 [pid 5328] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] <... futex resumed>) = 0 [pid 5327] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] <... futex resumed>) = 1 [pid 5328] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5328] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] <... futex resumed>) = 0 [pid 5327] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] <... futex resumed>) = 1 [pid 5328] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5328] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] <... futex resumed>) = 0 [pid 5327] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] <... futex resumed>) = 1 [pid 5328] ftruncate(5, 33587195) = 0 [pid 5328] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] <... futex resumed>) = 0 [pid 5327] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] <... futex resumed>) = 1 [ 96.210390][ T5328] loop0: detected capacity change from 0 to 4096 [ 96.220270][ T5328] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 96.236436][ T5328] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 96.251637][ T5328] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5328] sendfile(4, 5, NULL, 281474978811909 [pid 5327] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5327] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5327] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5330 attached => {parent_tid=[5330]}, 88) = 5330 [pid 5327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5330] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053 [pid 5327] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] <... rseq resumed>) = 0 [pid 5330] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5330] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5330] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5327] <... futex resumed>) = 0 [pid 5327] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5330] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5327] <... futex resumed>) = 0 [pid 5327] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] sendfile(6, 7, NULL, 281474978811909 [pid 5327] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5327] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5327] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5327] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5327] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0}./strace-static-x86_64: Process 5331 attached => {parent_tid=[5331]}, 88) = 5331 [pid 5327] rt_sigprocmask(SIG_SETMASK, [], [pid 5331] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053 [pid 5327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5327] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] <... rseq resumed>) = 0 [pid 5327] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5331] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5331] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5327] <... futex resumed>) = 0 [pid 5327] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5331] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5327] <... futex resumed>) = 0 [pid 5331] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] exit_group(0 [pid 5331] <... futex resumed>) = ? [pid 5327] <... exit_group resumed>) = ? [pid 5331] +++ exited with 0 +++ [pid 5330] <... sendfile resumed>) = ? [pid 5330] +++ exited with 0 +++ [pid 5328] <... sendfile resumed>) = ? [pid 5328] +++ exited with 0 +++ [pid 5327] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5327, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./74/binderfs") = 0 umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./74/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./74") = 0 mkdir("./75", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5332 ./strace-static-x86_64: Process 5332 attached [pid 5332] set_robust_list(0x555555cd6760, 24) = 0 [pid 5332] chdir("./75") = 0 [pid 5332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5332] setpgid(0, 0) = 0 [pid 5332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5332] write(3, "1000", 4) = 4 [pid 5332] close(3) = 0 [pid 5332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5332] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5332] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [ 96.595668][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0} => {parent_tid=[5333]}, 88) = 5333 ./strace-static-x86_64: Process 5333 attached [pid 5333] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5333] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5333] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5332] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5333] <... futex resumed>) = 0 [pid 5332] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5333] memfd_create("syzkaller", 0) = 3 [pid 5333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5333] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5333] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5333] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5333] close(3) = 0 [pid 5333] mkdir("./file1", 0777) = 0 [pid 5333] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5333] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5333] chdir("./file1") = 0 [pid 5333] ioctl(4, LOOP_CLR_FD) = 0 [pid 5333] close(4) = 0 [pid 5333] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = 0 [pid 5332] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5332] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5333] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5332] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5332] <... futex resumed>) = 0 [pid 5332] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] <... open resumed>) = 5 [pid 5333] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5332] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] ftruncate(5, 33587195) = 0 [pid 5333] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5332] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 96.699846][ T5333] loop0: detected capacity change from 0 to 4096 [ 96.708911][ T5333] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 96.722436][ T5333] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 96.738126][ T5333] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5333] sendfile(4, 5, NULL, 281474978811909 [pid 5332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5332] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5332] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5334]}, 88) = 5334 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5332] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5334 attached [pid 5334] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5334] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5334] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5334] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = 0 [pid 5332] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] <... futex resumed>) = 1 [pid 5334] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 7 [pid 5334] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = 0 [pid 5332] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] <... futex resumed>) = 1 [pid 5334] sendfile(6, 7, NULL, 281474978811909 [pid 5332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5332] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5332] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5335]}, 88) = 5335 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5332] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5335 attached [pid 5335] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5335] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5335] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5335] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = 0 [pid 5332] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5335] <... futex resumed>) = 1 [pid 5335] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5335] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5335] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5332] exit_group(0 [pid 5335] <... futex resumed>) = ? [pid 5332] <... exit_group resumed>) = ? [pid 5335] +++ exited with 0 +++ [pid 5334] <... sendfile resumed>) = ? [pid 5334] +++ exited with 0 +++ [pid 5333] <... sendfile resumed>) = ? [pid 5333] +++ exited with 0 +++ [pid 5332] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5332, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./75/binderfs") = 0 umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./75/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./75") = 0 mkdir("./76", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5337 ./strace-static-x86_64: Process 5337 attached [pid 5337] set_robust_list(0x555555cd6760, 24) = 0 [pid 5337] chdir("./76") = 0 [pid 5337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5337] setpgid(0, 0) = 0 [pid 5337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5337] write(3, "1000", 4) = 4 [pid 5337] close(3) = 0 [pid 5337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5337] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 97.095796][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5337] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5338 attached => {parent_tid=[5338]}, 88) = 5338 [pid 5337] rt_sigprocmask(SIG_SETMASK, [], [pid 5338] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053 [pid 5337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5338] <... rseq resumed>) = 0 [pid 5337] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5338] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5338] memfd_create("syzkaller", 0) = 3 [pid 5338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [pid 5338] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5338] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5338] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5338] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5338] close(3) = 0 [pid 5338] mkdir("./file1", 0777) = 0 [pid 5338] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5338] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5338] chdir("./file1") = 0 [pid 5338] ioctl(4, LOOP_CLR_FD) = 0 [pid 5338] close(4) = 0 [pid 5338] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5338] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5337] <... futex resumed>) = 0 [pid 5338] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5337] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5338] <... open resumed>) = 4 [pid 5338] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5338] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5337] <... futex resumed>) = 0 [pid 5338] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5337] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5338] <... open resumed>) = 5 [pid 5338] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5338] ftruncate(5, 33587195 [pid 5337] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... ftruncate resumed>) = 0 [pid 5337] <... futex resumed>) = 0 [pid 5338] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5337] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5338] <... futex resumed>) = 0 [pid 5337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5338] sendfile(4, 5, NULL, 281474978811909 [ 97.205754][ T5338] loop0: detected capacity change from 0 to 4096 [ 97.215911][ T5338] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 97.231827][ T5338] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 97.247772][ T5338] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5337] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5337] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5337] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0} => {parent_tid=[5340]}, 88) = 5340 ./strace-static-x86_64: Process 5340 attached [pid 5340] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5340] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5340] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5337] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5340] <... futex resumed>) = 0 [pid 5337] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5340] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5340] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5337] <... futex resumed>) = 0 [pid 5340] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5337] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5340] <... open resumed>) = 7 [pid 5340] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5340] sendfile(6, 7, NULL, 281474978811909 [pid 5337] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5337] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5337] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5341]}, 88) = 5341 ./strace-static-x86_64: Process 5341 attached [pid 5341] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5341] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5341] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5337] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5341] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000 [pid 5337] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5341] <... open resumed>) = 8 [pid 5341] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5337] <... futex resumed>) = 0 [pid 5337] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5341] <... futex resumed>) = 1 [pid 5341] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768) = 0 [pid 5341] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5341] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] exit_group(0 [pid 5341] <... futex resumed>) = ? [pid 5337] <... exit_group resumed>) = ? [pid 5341] +++ exited with 0 +++ [pid 5338] <... sendfile resumed>) = ? [pid 5338] +++ exited with 0 +++ [pid 5340] <... sendfile resumed>) = ? [pid 5340] +++ exited with 0 +++ [pid 5337] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5337, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555555cd77f0 /* 4 entries */, 32768) = 112 umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./76/binderfs") = 0 umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555555cdf830 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555cdf830 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./76/file1") = 0 getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./76") = 0 mkdir("./77", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd6750) = 5343 ./strace-static-x86_64: Process 5343 attached [pid 5343] set_robust_list(0x555555cd6760, 24) = 0 [pid 5343] chdir("./77") = 0 [pid 5343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5343] setpgid(0, 0) = 0 [pid 5343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5343] write(3, "1000", 4) = 4 [pid 5343] close(3) = 0 [pid 5343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5343] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] rt_sigaction(SIGRT_1, {sa_handler=0x7fd9aca36cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd9ac9d8a90}, NULL, 8) = 0 [pid 5343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ac9a5000 [pid 5343] mprotect(0x7fd9ac9a6000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9ac9c5990, parent_tid=0x7fd9ac9c5990, exit_signal=0, stack=0x7fd9ac9a5000, stack_size=0x20240, tls=0x7fd9ac9c56c0}./strace-static-x86_64: Process 5344 attached [pid 5344] rseq(0x7fd9ac9c5fe0, 0x20, 0, 0x53053053) = 0 [pid 5344] set_robust_list(0x7fd9ac9c59a0, 24) = 0 [pid 5344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5343] <... clone3 resumed> => {parent_tid=[5344]}, 88) = 5344 [pid 5343] rt_sigprocmask(SIG_SETMASK, [], [pid 5344] futex(0x7fd9acab1708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5343] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = 0 [pid 5343] <... futex resumed>) = 1 [pid 5343] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5344] memfd_create("syzkaller", 0) = 3 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9a45a5000 [ 97.607748][ T10] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [pid 5344] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\xbb\x02\x87\x1c\xc7\xbb\xb3\x5e\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5344] munmap(0x7fd9a45a5000, 2097152) = 0 [pid 5344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5344] close(3) = 0 [pid 5344] mkdir("./file1", 0777) = 0 [pid 5344] mount("/dev/loop0", "./file1", "ntfs3", MS_NODIRATIME, "") = 0 [pid 5344] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5344] chdir("./file1") = 0 [pid 5344] ioctl(4, LOOP_CLR_FD) = 0 [pid 5344] close(4) = 0 [pid 5344] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... futex resumed>) = 1 [pid 5344] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 5344] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 97.699931][ T5344] loop0: detected capacity change from 0 to 4096 [ 97.710648][ T5344] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 97.725169][ T5344] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 97.741085][ T5344] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [pid 5343] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5344] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5344] ftruncate(5, 33587195 [pid 5343] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... ftruncate resumed>) = 0 [pid 5344] futex(0x7fd9acab170c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5344] <... futex resumed>) = 1 [pid 5343] futex(0x7fd9acab1708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] sendfile(4, 5, NULL, 281474978811909 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7fd9acab170c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5343] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4784000 [pid 5343] mprotect(0x7fd9a4785000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a47a4990, parent_tid=0x7fd9a47a4990, exit_signal=0, stack=0x7fd9a4784000, stack_size=0x20240, tls=0x7fd9a47a46c0}./strace-static-x86_64: Process 5345 attached => {parent_tid=[5345]}, 88) = 5345 [pid 5345] rseq(0x7fd9a47a4fe0, 0x20, 0, 0x53053053) = 0 [pid 5345] set_robust_list(0x7fd9a47a49a0, 24) = 0 [pid 5345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5345] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5343] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5345] <... futex resumed>) = 0 [pid 5343] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5345] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 6 [pid 5345] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5345] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5345] <... futex resumed>) = 0 [pid 5343] <... futex resumed>) = 1 [pid 5345] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5343] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5345] <... open resumed>) = 7 [pid 5345] futex(0x7fd9acab171c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5345] futex(0x7fd9acab1718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7fd9acab1718, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5345] <... futex resumed>) = 0 [pid 5345] sendfile(6, 7, NULL, 281474978811909 [pid 5343] futex(0x7fd9acab171c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5343] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9a4763000 [pid 5343] mprotect(0x7fd9a4764000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd9a4783990, parent_tid=0x7fd9a4783990, exit_signal=0, stack=0x7fd9a4763000, stack_size=0x20240, tls=0x7fd9a47836c0} => {parent_tid=[5347]}, 88) = 5347 [pid 5343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5343] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5347 attached [pid 5347] rseq(0x7fd9a4783fe0, 0x20, 0, 0x53053053) = 0 [pid 5347] set_robust_list(0x7fd9a47839a0, 24) = 0 [pid 5347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5347] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NOFOLLOW|O_NOATIME, 000) = 8 [pid 5347] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5347] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] futex(0x7fd9acab1728, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = 0 [pid 5343] <... futex resumed>) = 1 [pid 5347] fallocate(8, FALLOC_FL_COLLAPSE_RANGE, 0, 32768 [pid 5343] futex(0x7fd9acab172c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... fallocate resumed>) = 0 [pid 5347] futex(0x7fd9acab172c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = 0 [pid 5347] <... futex resumed>) = 1 [pid 5347] futex(0x7fd9acab1728, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] exit_group(0 [pid 5347] <... futex resumed>) = ? [pid 5343] <... exit_group resumed>) = ? [pid 5347] +++ exited with 0 +++ [pid 5028] kill(-5343, SIGKILL) = 0 [pid 5028] kill(5343, SIGKILL) = 0 [pid 5028] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x555555cd77f0 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(3, 0x555555cd77f0 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [ 127.892789][ T10] ntfs3: loop0: ino=5, "/" ntfs3_write_inode failed, -22. [ 244.851882][ T28] INFO: task syz-executor122:5344 blocked for more than 143 seconds. [ 244.860093][ T28] Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 244.867178][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.875934][ T28] task:syz-executor122 state:D stack:26032 pid:5344 ppid:5028 flags:0x00004006 [ 244.885300][ T28] Call Trace: [ 244.888592][ T28] [ 244.891517][ T28] __schedule+0xee1/0x59f0 [ 244.896179][ T28] ? mark_lock+0x105/0x1950 [ 244.900709][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 244.906757][ T28] ? io_schedule_timeout+0x150/0x150 [ 244.912101][ T28] ? find_held_lock+0x2d/0x110 [ 244.916868][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 244.922295][ T28] schedule+0xe7/0x1b0 [ 244.926391][ T28] io_schedule+0xbe/0x130 [ 244.930720][ T28] folio_wait_bit_common+0x3d0/0x9a0 [ 244.936167][ T28] ? filemap_cachestat+0x970/0x970 [ 244.941301][ T28] ? folio_unlock+0xd0/0xd0 [ 244.945863][ T28] ? preempt_count_sub+0x150/0x150 [ 244.951007][ T28] __filemap_get_folio+0x788/0x990 [ 244.956160][ T28] ? kasan_set_track+0x25/0x30 [ 244.960970][ T28] pagecache_get_page+0x2c/0x270 [ 244.965965][ T28] ni_readpage_cmpr+0x24e/0xc80 [ 244.970887][ T28] ? ntfs_resident_writepage+0x1e0/0x1e0 [ 244.976570][ T28] ntfs_read_folio+0x107/0x1e0 [ 244.981353][ T28] ? ntfs_resident_writepage+0x1e0/0x1e0 [ 244.987026][ T28] filemap_read_folio+0xe5/0x2b0 [ 244.992037][ T28] ? __folio_lock_killable+0x20/0x20 [ 244.997339][ T28] filemap_get_pages+0xdd7/0x1820 [ 245.002415][ T28] ? filemap_add_folio+0x1e0/0x1e0 [ 245.007569][ T28] ? preempt_count_sub+0x150/0x150 [ 245.012833][ T28] filemap_splice_read+0x3d0/0x9f0 [ 245.017985][ T28] ? splice_folio_into_pipe+0x5f0/0x5f0 [ 245.023581][ T28] ? aa_path_link+0x300/0x300 [ 245.028341][ T28] ? fsnotify_perm.part.0+0x268/0x630 [ 245.033800][ T28] ? apparmor_file_permission+0x21f/0x4f0 [ 245.039553][ T28] ntfs_file_splice_read+0x10d/0x190 [ 245.044895][ T28] ? ntfs_fiemap+0x110/0x110 [ 245.049503][ T28] vfs_splice_read+0x2c8/0x3b0 [ 245.054355][ T28] splice_direct_to_actor+0x2a5/0xa30 [ 245.059755][ T28] ? folio_flags.constprop.0+0x150/0x150 [ 245.065452][ T28] ? vfs_splice_read+0x3b0/0x3b0 [ 245.070413][ T28] ? bpf_lsm_file_permission+0x9/0x10 [ 245.075826][ T28] ? security_file_permission+0x94/0x100 [ 245.081514][ T28] do_splice_direct+0x1af/0x280 [ 245.086417][ T28] ? splice_direct_to_actor+0xa30/0xa30 [ 245.092046][ T28] ? propagate_umount+0x1af0/0x1af0 [ 245.097280][ T28] do_sendfile+0xb88/0x1390 [ 245.101897][ T28] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 245.107225][ T28] ? ptrace_notify+0xf4/0x130 [ 245.111971][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 245.117375][ T28] __x64_sys_sendfile64+0x1d6/0x220 [ 245.122660][ T28] ? __ia32_sys_sendfile+0x220/0x220 [ 245.127976][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 245.133319][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 245.138545][ T28] ? ptrace_notify+0xf4/0x130 [ 245.143270][ T28] do_syscall_64+0x38/0xb0 [ 245.147707][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 245.153723][ T28] RIP: 0033:0x7fd9aca10e09 [ 245.158148][ T28] RSP: 002b:00007fd9ac9c5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 245.166602][ T28] RAX: ffffffffffffffda RBX: 00007fd9acab1708 RCX: 00007fd9aca10e09 [ 245.174615][ T28] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 245.182643][ T28] RBP: 00007fd9acab1700 R08: 00007fd9ac9c56c0 R09: 0000000000000000 [ 245.190640][ T28] R10: 0001000000201005 R11: 0000000000000246 R12: 00007fd9acab170c [ 245.198665][ T28] R13: 0000000000000006 R14: 00007ffdd97961a0 R15: 00007ffdd9796288 [ 245.206697][ T28] [ 245.209722][ T28] INFO: task syz-executor122:5345 blocked for more than 143 seconds. [ 245.217851][ T28] Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 245.224965][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.233673][ T28] task:syz-executor122 state:D stack:26448 pid:5345 ppid:5028 flags:0x00004006 [ 245.242963][ T28] Call Trace: [ 245.246319][ T28] [ 245.249241][ T28] __schedule+0xee1/0x59f0 [ 245.253789][ T28] ? mark_lock+0x105/0x1950 [ 245.258330][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 245.264434][ T28] ? io_schedule_timeout+0x150/0x150 [ 245.269775][ T28] ? mark_held_locks+0x9f/0xe0 [ 245.274619][ T28] ? asm_common_interrupt+0x26/0x40 [ 245.279845][ T28] ? asm_common_interrupt+0x26/0x40 [ 245.285107][ T28] schedule+0xe7/0x1b0 [ 245.289201][ T28] io_schedule+0xbe/0x130 [ 245.293580][ T28] folio_wait_bit_common+0x3d0/0x9a0 [ 245.298901][ T28] ? filemap_cachestat+0x970/0x970 [ 245.304125][ T28] ? folio_unlock+0xd0/0xd0 [ 245.308664][ T28] ? preempt_count_sub+0x150/0x150 [ 245.313833][ T28] ? wake_up_q+0x8f/0xf0 [ 245.318099][ T28] ? do_raw_spin_unlock+0x173/0x230 [ 245.323356][ T28] __filemap_get_folio+0x788/0x990 [ 245.328486][ T28] ? folio_flags.constprop.0+0x56/0x150 [ 245.334110][ T28] pagecache_get_page+0x2c/0x270 [ 245.339081][ T28] ntfs_get_frame_pages+0x132/0x640 [ 245.344336][ T28] ntfs_file_write_iter+0xfdc/0x1c10 [ 245.349648][ T28] ? ntfs_fallocate+0x1210/0x1210 [ 245.354722][ T28] ? do_splice_direct+0x1af/0x280 [ 245.359774][ T28] ? do_sendfile+0xab0/0x1390 [ 245.364498][ T28] ? __x64_sys_sendfile64+0x1d6/0x220 [ 245.369894][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 245.376059][ T28] do_iter_readv_writev+0x21e/0x3c0 [ 245.381305][ T28] ? generic_copy_file_range+0x1d0/0x1d0 [ 245.387177][ T28] ? bpf_lsm_file_permission+0x9/0x10 [ 245.392629][ T28] ? security_file_permission+0x94/0x100 [ 245.398315][ T28] do_iter_write+0x17f/0x830 [ 245.403039][ T28] vfs_iter_write+0x7a/0xb0 [ 245.407569][ T28] iter_file_splice_write+0x698/0xbf0 [ 245.413022][ T28] ? splice_from_pipe_next+0x5d0/0x5d0 [ 245.418516][ T28] ? ntfs_file_splice_read+0x115/0x190 [ 245.424023][ T28] ? splice_from_pipe_next+0x5d0/0x5d0 [ 245.429517][ T28] direct_splice_actor+0x118/0x180 [ 245.434688][ T28] splice_direct_to_actor+0x347/0xa30 [ 245.440091][ T28] ? folio_flags.constprop.0+0x150/0x150 [ 245.445876][ T28] ? vfs_splice_read+0x3b0/0x3b0 [ 245.450849][ T28] ? bpf_lsm_file_permission+0x9/0x10 [ 245.456275][ T28] ? security_file_permission+0x94/0x100 [ 245.461971][ T28] do_splice_direct+0x1af/0x280 [ 245.466824][ T28] ? splice_direct_to_actor+0xa30/0xa30 [ 245.472433][ T28] ? propagate_umount+0x1af0/0x1af0 [ 245.477668][ T28] do_sendfile+0xb88/0x1390 [ 245.482236][ T28] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 245.487548][ T28] ? ptrace_notify+0xf4/0x130 [ 245.492266][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 245.497667][ T28] __x64_sys_sendfile64+0x1d6/0x220 [ 245.502917][ T28] ? __ia32_sys_sendfile+0x220/0x220 [ 245.508228][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 245.513511][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 245.518735][ T28] ? ptrace_notify+0xf4/0x130 [ 245.523492][ T28] do_syscall_64+0x38/0xb0 [ 245.527942][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 245.533896][ T28] RIP: 0033:0x7fd9aca10e09 [ 245.538327][ T28] RSP: 002b:00007fd9a47a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 245.546781][ T28] RAX: ffffffffffffffda RBX: 00007fd9acab1718 RCX: 00007fd9aca10e09 [ 245.554827][ T28] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 245.562834][ T28] RBP: 00007fd9acab1710 R08: 00007fd9a47a46c0 R09: 0000000000000000 [ 245.570840][ T28] R10: 0001000000201005 R11: 0000000000000246 R12: 00007fd9acab171c [ 245.578882][ T28] R13: 000000000000006e R14: 00007ffdd97961a0 R15: 00007ffdd9796288 [ 245.587189][ T28] [ 245.590214][ T28] [ 245.590214][ T28] Showing all locks held in the system: [ 245.597973][ T28] 1 lock held by rcu_tasks_kthre/13: [ 245.603320][ T28] #0: ffffffff8c9a5cb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xef0 [ 245.613843][ T28] 1 lock held by rcu_tasks_trace/14: [ 245.619136][ T28] #0: ffffffff8c9a5970 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xef0 [ 245.630152][ T28] 1 lock held by khungtaskd/28: [ 245.635035][ T28] #0: ffffffff8c9a68c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 245.644946][ T28] 5 locks held by kworker/u4:4/57: [ 245.650109][ T28] 2 locks held by getty/4784: [ 245.654847][ T28] #0: ffff88814ac0c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 245.664716][ T28] #1: ffffc900015b72f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfcb/0x1480 [ 245.674853][ T28] 3 locks held by syz-executor122/5344: [ 245.680407][ T28] #0: ffff88807da84410 (sb_writers#10){.+.+}-{0:0}, at: __x64_sys_sendfile64+0x1d6/0x220 [ 245.690381][ T28] #1: ffff888072bebd88 (mapping.invalidate_lock#3){++++}-{3:3}, at: filemap_get_pages+0xd14/0x1820 [ 245.701266][ T28] #2: ffff888072beb900 (&ni->ni_lock/4){+.+.}-{3:3}, at: ntfs_read_folio+0xfc/0x1e0 [ 245.710803][ T28] 2 locks held by syz-executor122/5345: [ 245.716376][ T28] #0: ffff88807da84410 (sb_writers#10){.+.+}-{0:0}, at: __x64_sys_sendfile64+0x1d6/0x220 [ 245.726361][ T28] #1: ffff888072bebbd0 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: ntfs_file_write_iter+0x296/0x1c10 [ 245.737685][ T28] [ 245.740012][ T28] ============================================= [ 245.740012][ T28] [ 245.748448][ T28] NMI backtrace for cpu 1 [ 245.752779][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 245.762050][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 245.772111][ T28] Call Trace: [ 245.775374][ T28] [ 245.778293][ T28] dump_stack_lvl+0xd9/0x1b0 [ 245.782954][ T28] nmi_cpu_backtrace+0x277/0x380 [ 245.787891][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 245.793084][ T28] nmi_trigger_cpumask_backtrace+0x2ac/0x310 [ 245.799056][ T28] watchdog+0xf29/0x11b0 [ 245.803316][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 245.809331][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 245.815332][ T28] kthread+0x33a/0x430 [ 245.819412][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 245.825058][ T28] ret_from_fork+0x2c/0x70 [ 245.829533][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 245.835177][ T28] ret_from_fork_asm+0x11/0x20 [ 245.839968][ T28] RIP: 0000:0x0 [ 245.843446][ T28] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 245.850810][ T28] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 245.859231][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 245.867224][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.875210][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.883196][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 245.891177][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.899191][ T28] [ 245.902299][ T28] Sending NMI from CPU 1 to CPUs 0: [ 245.907535][ C0] NMI backtrace for cpu 0 [ 245.907545][ C0] CPU: 0 PID: 57 Comm: kworker/u4:4 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 245.907566][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 245.907577][ C0] Workqueue: events_unbound toggle_allocation_gate [ 245.907603][ C0] RIP: 0010:__mutex_lock+0x14f/0x1340 [ 245.907632][ C0] Code: 29 49 8d 7e 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 00 0d 00 00 4d 3b 76 60 0f 85 67 07 00 00 01 00 00 00 e8 27 ae 23 f7 49 8d 46 68 31 d2 4d 89 e1 48 89 85 [ 245.907650][ C0] RSP: 0018:ffffc90001587aa0 EFLAGS: 00000246 [ 245.907664][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 245.907676][ C0] RDX: 1ffffffff1954708 RSI: ffffffff8a6c7cc0 RDI: ffffffff8caa3840 [ 245.907689][ C0] RBP: ffffc90001587bf0 R08: ffffffff81b25fbb R09: 0000000000000001 [ 245.907702][ C0] R10: ffffc90001587c08 R11: 0000000000000000 R12: 0000000000000000 [ 245.907714][ C0] R13: dffffc0000000000 R14: ffffffff8caa37e0 R15: ffffffff9216b4c0 [ 245.907727][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 245.907747][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.907760][ C0] CR2: 000056410262d680 CR3: 000000000c776000 CR4: 00000000003506f0 [ 245.907772][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.907783][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.907795][ C0] Call Trace: [ 245.907799][ C0] [ 245.907806][ C0] ? nmi_cpu_backtrace+0x1d4/0x380 [ 245.907827][ C0] ? __mutex_lock+0x14f/0x1340 [ 245.907852][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 245.907878][ C0] ? nmi_handle+0x145/0x400 [ 245.907906][ C0] ? irqentry_nmi_enter+0x7f/0x90 [ 245.907931][ C0] ? __mutex_lock+0x14f/0x1340 [ 245.907956][ C0] ? default_do_nmi+0x69/0x160 [ 245.907979][ C0] ? exc_nmi+0x171/0x1e0 [ 245.908001][ C0] ? end_repeat_nmi+0x16/0x31 [ 245.908027][ C0] ? static_key_disable_cpuslocked+0x10b/0x1b0 [ 245.908053][ C0] ? __mutex_lock+0x14f/0x1340 [ 245.908078][ C0] ? __mutex_lock+0x14f/0x1340 [ 245.908104][ C0] ? __mutex_lock+0x14f/0x1340 [ 245.908128][ C0] [ 245.908133][ C0] [ 245.908140][ C0] ? static_key_disable_cpuslocked+0x10b/0x1b0 [ 245.908166][ C0] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 245.908192][ C0] ? lock_sync+0x190/0x190 [ 245.908222][ C0] ? static_key_disable_cpuslocked+0x10b/0x1b0 [ 245.908245][ C0] static_key_disable_cpuslocked+0x10b/0x1b0 [ 245.908269][ C0] static_key_disable+0x1a/0x20 [ 245.908291][ C0] toggle_allocation_gate+0x13f/0x250 [ 245.908311][ C0] ? wake_up_kfence_timer+0x30/0x30 [ 245.908330][ C0] ? spin_bug+0x1d0/0x1d0 [ 245.908357][ C0] process_one_work+0xaa2/0x16f0 [ 245.908382][ C0] ? lock_sync+0x190/0x190 [ 245.908403][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 245.908427][ C0] ? spin_bug+0x1d0/0x1d0 [ 245.908454][ C0] worker_thread+0x687/0x1110 [ 245.908480][ C0] ? __kthread_parkme+0x152/0x220 [ 245.908498][ C0] ? process_one_work+0x16f0/0x16f0 [ 245.908519][ C0] kthread+0x33a/0x430 [ 245.908537][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 245.908557][ C0] ret_from_fork+0x2c/0x70 [ 245.908578][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 245.908598][ C0] ret_from_fork_asm+0x11/0x20 [ 245.908622][ C0] RIP: 0000:0x0 [ 245.908638][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 245.908647][ C0] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 245.908662][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 245.908673][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.908689][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.908700][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 245.908711][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.908729][ C0] [ 245.909534][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 246.300573][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 246.309864][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 246.319923][ T28] Call Trace: [ 246.323203][ T28] [ 246.326136][ T28] dump_stack_lvl+0xd9/0x1b0 [ 246.330747][ T28] panic+0x6a4/0x750 [ 246.334656][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 246.339785][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 246.345004][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 246.350405][ T28] ? watchdog+0xce1/0x11b0 [ 246.354850][ T28] watchdog+0xcf2/0x11b0 [ 246.359118][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 246.365124][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 246.371125][ T28] kthread+0x33a/0x430 [ 246.375203][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 246.380852][ T28] ret_from_fork+0x2c/0x70 [ 246.385281][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 246.390924][ T28] ret_from_fork_asm+0x11/0x20 [ 246.395703][ T28] RIP: 0000:0x0 [ 246.399180][ T28] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 246.406545][ T28] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 246.414965][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 246.422940][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.430913][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.438887][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 246.446863][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.454859][ T28] [ 246.458062][ T28] Kernel Offset: disabled [ 246.462377][ T28] Rebooting in 86400 seconds..