./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor605753495 <...> Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. execve("./syz-executor605753495", ["./syz-executor605753495"], 0x7fffa5c8cf30 /* 10 vars */) = 0 brk(NULL) = 0x55556d635000 brk(0x55556d635d40) = 0x55556d635d40 arch_prctl(ARCH_SET_FS, 0x55556d6353c0) = 0 set_tid_address(0x55556d635690) = 5213 set_robust_list(0x55556d6356a0, 24) = 0 rseq(0x55556d635ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor605753495", 4096) = 27 getrandom("\x16\x5f\x52\x74\x37\x11\xbc\x3c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556d635d40 brk(0x55556d656d40) = 0x55556d656d40 brk(0x55556d657000) = 0x55556d657000 mprotect(0x7f3774127000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5214 attached [pid 5214] set_robust_list(0x55556d6356a0, 24 [pid 5213] <... clone resumed>, child_tidptr=0x55556d635690) = 5214 [pid 5214] <... set_robust_list resumed>) = 0 [pid 5214] mkdir("./syzkaller.gtVY4v", 0700 [pid 5213] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5214] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5215 attached [pid 5213] <... clone resumed>, child_tidptr=0x55556d635690) = 5215 [pid 5214] chmod("./syzkaller.gtVY4v", 0777 [pid 5213] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5215] set_robust_list(0x55556d6356a0, 24 [pid 5214] <... chmod resumed>) = 0 [pid 5214] chdir("./syzkaller.gtVY4v"./strace-static-x86_64: Process 5216 attached [pid 5215] <... set_robust_list resumed>) = 0 [pid 5213] <... clone resumed>, child_tidptr=0x55556d635690) = 5216 [pid 5214] <... chdir resumed>) = 0 [pid 5213] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5214] mkdir("./0", 0777 [pid 5216] set_robust_list(0x55556d6356a0, 24 [pid 5215] mkdir("./syzkaller.8AtNu9", 0700 [pid 5213] <... clone resumed>, child_tidptr=0x55556d635690) = 5217 ./strace-static-x86_64: Process 5217 attached [pid 5216] <... set_robust_list resumed>) = 0 [pid 5215] <... mkdir resumed>) = 0 [pid 5214] <... mkdir resumed>) = 0 [pid 5213] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5217] set_robust_list(0x55556d6356a0, 24 [pid 5216] getrandom( [pid 5215] chmod("./syzkaller.8AtNu9", 0777 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5217] <... set_robust_list resumed>) = 0 [pid 5216] <... getrandom resumed>"\x6c\xad\x85\x45\xda\x42\x0b\xdc", 8, GRND_NONBLOCK) = 8 [pid 5215] <... chmod resumed>) = 0 [pid 5214] <... openat resumed>) = 3 [pid 5215] chdir("./syzkaller.8AtNu9"./strace-static-x86_64: Process 5218 attached [pid 5217] mkdir("./syzkaller.GGEjCS", 0700 [pid 5216] mkdir("./syzkaller.YRu8Ao", 0700 [pid 5215] <... chdir resumed>) = 0 [pid 5214] ioctl(3, LOOP_CLR_FD [pid 5218] set_robust_list(0x55556d6356a0, 24 [pid 5216] <... mkdir resumed>) = 0 [pid 5215] mkdir("./0", 0777 [pid 5214] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5213] <... clone resumed>, child_tidptr=0x55556d635690) = 5218 [pid 5218] <... set_robust_list resumed>) = 0 [pid 5217] <... mkdir resumed>) = 0 [pid 5216] chmod("./syzkaller.YRu8Ao", 0777 [pid 5214] close(3 [pid 5218] mkdir("./syzkaller.mHZIFF", 0700 [pid 5217] chmod("./syzkaller.GGEjCS", 0777 [pid 5216] <... chmod resumed>) = 0 [pid 5215] <... mkdir resumed>) = 0 [pid 5214] <... close resumed>) = 0 [pid 5218] <... mkdir resumed>) = 0 [pid 5217] <... chmod resumed>) = 0 [pid 5216] chdir("./syzkaller.YRu8Ao" [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5216] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5219 attached [pid 5218] chmod("./syzkaller.mHZIFF", 0777 [pid 5217] chdir("./syzkaller.GGEjCS" [pid 5216] mkdir("./0", 0777 [pid 5215] <... openat resumed>) = 3 [pid 5217] <... chdir resumed>) = 0 [pid 5219] set_robust_list(0x55556d6356a0, 24 [pid 5218] <... chmod resumed>) = 0 [pid 5217] mkdir("./0", 0777 [pid 5216] <... mkdir resumed>) = 0 [pid 5215] ioctl(3, LOOP_CLR_FD [pid 5214] <... clone resumed>, child_tidptr=0x55556d635690) = 5219 [pid 5218] chdir("./syzkaller.mHZIFF" [pid 5219] <... set_robust_list resumed>) = 0 [pid 5219] chdir("./0") = 0 [pid 5219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5218] <... chdir resumed>) = 0 [pid 5217] <... mkdir resumed>) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5215] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5219] <... prctl resumed>) = 0 [pid 5219] setpgid(0, 0 [pid 5218] mkdir("./0", 0777 [pid 5219] <... setpgid resumed>) = 0 [pid 5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5215] close(3 [pid 5216] <... openat resumed>) = 3 [pid 5219] <... openat resumed>) = 3 [pid 5219] write(3, "1000", 4) = 4 [pid 5219] close(3) = 0 [pid 5218] <... mkdir resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5216] ioctl(3, LOOP_CLR_FD [pid 5215] <... close resumed>) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5219] symlink("/dev/binderfs", "./binderfs" [pid 5217] <... openat resumed>) = 3 [pid 5216] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5219] <... symlink resumed>) = 0 [pid 5218] <... openat resumed>) = 3 [pid 5218] ioctl(3, LOOP_CLR_FD [pid 5216] close(3 [pid 5217] ioctl(3, LOOP_CLR_FD [pid 5216] <... close resumed>) = 0 [pid 5218] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5219] write(1, "executing program\n", 18 [pid 5217] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5219] <... write resumed>) = 18 [pid 5217] close(3./strace-static-x86_64: Process 5222 attached [pid 5219] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... close resumed>) = 0 [pid 5219] <... futex resumed>) = 0 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD executing program [pid 5219] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5222] set_robust_list(0x55556d6356a0, 24 [pid 5219] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5218] close(3 [pid 5222] <... set_robust_list resumed>) = 0 [pid 5219] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5222] chdir("./0" [pid 5219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5215] <... clone resumed>, child_tidptr=0x55556d635690) = 5221 [pid 5219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5222 ./strace-static-x86_64: Process 5221 attached ./strace-static-x86_64: Process 5223 attached [pid 5219] <... mmap resumed>) = 0x7f3774034000 [pid 5218] <... close resumed>) = 0 [pid 5221] set_robust_list(0x55556d6356a0, 24 [pid 5223] set_robust_list(0x55556d6356a0, 24 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5224 attached [pid 5221] <... set_robust_list resumed>) = 0 [pid 5223] <... set_robust_list resumed>) = 0 [pid 5222] <... chdir resumed>) = 0 [pid 5219] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5223 [pid 5221] chdir("./0" [pid 5223] chdir("./0" [pid 5222] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5224 [pid 5224] set_robust_list(0x55556d6356a0, 24 [pid 5221] <... chdir resumed>) = 0 [pid 5223] <... chdir resumed>) = 0 [pid 5222] <... prctl resumed>) = 0 [pid 5219] <... mprotect resumed>) = 0 [pid 5224] <... set_robust_list resumed>) = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5222] setpgid(0, 0 [pid 5219] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5224] chdir("./0" [pid 5223] <... prctl resumed>) = 0 [pid 5219] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5223] setpgid(0, 0) = 0 [pid 5224] <... chdir resumed>) = 0 [pid 5221] <... prctl resumed>) = 0 [pid 5222] <... setpgid resumed>) = 0 [pid 5219] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5225 attached [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5221] setpgid(0, 0 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5225] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5224] <... prctl resumed>) = 0 [pid 5221] <... setpgid resumed>) = 0 [pid 5222] <... openat resumed>) = 3 [pid 5219] <... clone3 resumed> => {parent_tid=[5225]}, 88) = 5225 [pid 5225] <... rseq resumed>) = 0 [pid 5224] setpgid(0, 0 [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5223] <... openat resumed>) = 3 [pid 5222] write(3, "1000", 4 [pid 5219] rt_sigprocmask(SIG_SETMASK, [], [pid 5225] set_robust_list(0x7f37740549a0, 24 [pid 5224] <... setpgid resumed>) = 0 [pid 5222] <... write resumed>) = 4 [pid 5219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5221] <... openat resumed>) = 3 [pid 5223] write(3, "1000", 4 [pid 5222] close(3 [pid 5219] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... close resumed>) = 0 [pid 5219] <... futex resumed>) = 0 [pid 5225] <... set_robust_list resumed>) = 0 [pid 5222] symlink("/dev/binderfs", "./binderfs" [pid 5225] rt_sigprocmask(SIG_SETMASK, [], [pid 5219] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5221] write(3, "1000", 4 [pid 5223] <... write resumed>) = 4 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5221] <... write resumed>) = 4 [pid 5223] close(3 [pid 5221] close(3 [pid 5223] <... close resumed>) = 0 [pid 5221] <... close resumed>) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs" [pid 5221] symlink("/dev/binderfs", "./binderfs" [pid 5225] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5224] <... openat resumed>) = 3 [pid 5223] <... symlink resumed>) = 0 [pid 5222] <... symlink resumed>) = 0 executing program [pid 5221] <... symlink resumed>) = 0 [pid 5222] write(1, "executing program\n", 18 [pid 5225] memfd_create("syzkaller", 0 [pid 5224] write(3, "1000", 4executing program [pid 5225] <... memfd_create resumed>) = 3 [pid 5224] <... write resumed>) = 4 [pid 5221] write(1, "executing program\n", 18 [pid 5222] <... write resumed>) = 18 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5224] close(3 [pid 5221] <... write resumed>) = 18 [pid 5222] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 5225] <... mmap resumed>) = 0x7f376bc00000 [pid 5224] <... close resumed>) = 0 [pid 5221] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] write(1, "executing program\n", 18 [pid 5222] <... futex resumed>) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs" [pid 5221] <... futex resumed>) = 0 [pid 5223] <... write resumed>) = 18 [pid 5222] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5221] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5223] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5224] <... symlink resumed>) = 0 [pid 5221] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5222] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5224] write(1, "executing program\n", 18 [pid 5221] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5223] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5223] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5222] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5223] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], executing program [pid 5222] <... mmap resumed>) = 0x7f3774034000 [pid 5224] <... write resumed>) = 18 [pid 5221] <... mmap resumed>) = 0x7f3774034000 [pid 5223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5222] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5224] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5221] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5223] <... mmap resumed>) = 0x7f3774034000 [pid 5222] <... mprotect resumed>) = 0 [pid 5221] <... mprotect resumed>) = 0 [pid 5223] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5222] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5221] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5223] <... mprotect resumed>) = 0 [pid 5223] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5222] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5221] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5222] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5223] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5226 attached [pid 5224] <... futex resumed>) = 0 [pid 5223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5226] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5224] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, ./strace-static-x86_64: Process 5228 attached [pid 5226] <... rseq resumed>) = 0 [pid 5221] <... clone3 resumed> => {parent_tid=[5226]}, 88) = 5226 [pid 5222] <... clone3 resumed> => {parent_tid=[5227]}, 88) = 5227 [pid 5228] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5226] set_robust_list(0x7f37740549a0, 24 [pid 5221] rt_sigprocmask(SIG_SETMASK, [], [pid 5228] <... rseq resumed>) = 0 [pid 5226] <... set_robust_list resumed>) = 0 [pid 5224] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5223] <... clone3 resumed> => {parent_tid=[5228]}, 88) = 5228 [pid 5222] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5227 attached [pid 5228] set_robust_list(0x7f37740549a0, 24 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], [pid 5224] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5221] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] rt_sigprocmask(SIG_SETMASK, [], [pid 5222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5228] <... set_robust_list resumed>) = 0 [pid 5227] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5222] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] rt_sigprocmask(SIG_SETMASK, [], [pid 5226] memfd_create("syzkaller", 0 [pid 5221] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5223] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5227] <... rseq resumed>) = 0 [pid 5222] <... futex resumed>) = 0 [pid 5228] memfd_create("syzkaller", 0 [pid 5227] set_robust_list(0x7f37740549a0, 24 [pid 5224] <... mmap resumed>) = 0x7f3774034000 [pid 5223] <... futex resumed>) = 0 [pid 5222] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5228] <... memfd_create resumed>) = 3 [pid 5227] <... set_robust_list resumed>) = 0 [pid 5226] <... memfd_create resumed>) = 3 [pid 5224] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5223] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5227] rt_sigprocmask(SIG_SETMASK, [], [pid 5226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5224] <... mprotect resumed>) = 0 [pid 5227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5228] <... mmap resumed>) = 0x7f376bc00000 [pid 5226] <... mmap resumed>) = 0x7f376bc00000 [pid 5224] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5227] memfd_create("syzkaller", 0 [pid 5224] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5227] <... memfd_create resumed>) = 3 [pid 5224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5230 attached [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5230] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5224] <... clone3 resumed> => {parent_tid=[5230]}, 88) = 5230 [pid 5230] <... rseq resumed>) = 0 [pid 5224] rt_sigprocmask(SIG_SETMASK, [], [pid 5230] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5230] rt_sigprocmask(SIG_SETMASK, [], [pid 5224] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5224] <... futex resumed>) = 0 [pid 5224] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5230] memfd_create("syzkaller", 0) = 3 [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5228] <... write resumed>) = 20699119 [pid 5228] munmap(0x7f376bc00000, 138412032 [pid 5226] <... write resumed>) = 20699119 [pid 5226] munmap(0x7f376bc00000, 138412032 [pid 5228] <... munmap resumed>) = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5228] ioctl(4, LOOP_SET_FD, 3 [pid 5227] <... write resumed>) = 20699119 [pid 5227] munmap(0x7f376bc00000, 138412032 [pid 5228] <... ioctl resumed>) = 0 [pid 5230] <... write resumed>) = 20699119 [pid 5228] close(3 [pid 5227] <... munmap resumed>) = 0 [pid 5226] <... munmap resumed>) = 0 [pid 5225] <... write resumed>) = 20699119 [pid 5228] <... close resumed>) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5230] munmap(0x7f376bc00000, 138412032 [pid 5228] close(4 [pid 5227] <... openat resumed>) = 4 [pid 5225] munmap(0x7f376bc00000, 138412032 [pid 5228] <... close resumed>) = 0 [pid 5228] mkdir("./bus", 0777 [pid 5227] ioctl(4, LOOP_SET_FD, 3 [pid 5228] <... mkdir resumed>) = 0 [pid 5228] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5226] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 64.414800][ T5228] loop3: detected capacity change from 0 to 40427 [ 64.448126][ T5227] loop2: detected capacity change from 0 to 40427 [pid 5226] ioctl(4, LOOP_SET_FD, 3 [pid 5230] <... munmap resumed>) = 0 [pid 5227] <... ioctl resumed>) = 0 [pid 5226] <... ioctl resumed>) = 0 [pid 5225] <... munmap resumed>) = 0 [pid 5230] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5227] close(3 [pid 5226] close(3 [pid 5225] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5230] <... openat resumed>) = 4 [pid 5226] <... close resumed>) = 0 [pid 5230] ioctl(4, LOOP_SET_FD, 3 [pid 5227] <... close resumed>) = 0 [pid 5226] close(4 [pid 5225] <... openat resumed>) = 4 [pid 5227] close(4 [pid 5226] <... close resumed>) = 0 [pid 5225] ioctl(4, LOOP_SET_FD, 3 [pid 5230] <... ioctl resumed>) = 0 [pid 5226] mkdir("./bus", 0777 [pid 5230] close(3 [pid 5227] <... close resumed>) = 0 [pid 5226] <... mkdir resumed>) = 0 [pid 5225] <... ioctl resumed>) = 0 [pid 5230] <... close resumed>) = 0 [pid 5227] mkdir("./bus", 0777 [pid 5226] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5225] close(3 [pid 5227] <... mkdir resumed>) = 0 [pid 5225] <... close resumed>) = 0 [ 64.461026][ T5226] loop1: detected capacity change from 0 to 40427 [ 64.467056][ T5228] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.475797][ T5228] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.489901][ T5230] loop4: detected capacity change from 0 to 40427 [ 64.497131][ T5225] loop0: detected capacity change from 0 to 40427 [pid 5227] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5225] close(4) = 0 [pid 5230] close(4 [pid 5225] mkdir("./bus", 0777 [pid 5230] <... close resumed>) = 0 [pid 5230] mkdir("./bus", 0777 [pid 5225] <... mkdir resumed>) = 0 [pid 5230] <... mkdir resumed>) = 0 [pid 5225] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [ 64.509873][ T5226] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 64.517648][ T5226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 64.530065][ T5227] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 64.546399][ T5225] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 64.555649][ T5228] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.562233][ T5230] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 64.576529][ T5227] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 64.585155][ T5225] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 64.591458][ T5230] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 64.626307][ T5227] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.635136][ T5226] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.650047][ T5225] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.650779][ T5230] F2FS-fs (loop4): Found nat_bits in checkpoint [ 64.773349][ T5228] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.779979][ T5225] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 64.788361][ T5227] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 64.793850][ T5225] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.796278][ T5228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.803403][ T5227] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 5230] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5228] <... mount resumed>) = 0 [pid 5227] <... mount resumed>) = 0 [pid 5225] <... mount resumed>) = 0 [pid 5228] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5227] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5225] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5228] <... openat resumed>) = 3 [pid 5227] <... openat resumed>) = 3 [pid 5225] <... openat resumed>) = 3 [pid 5225] chdir("./bus") = 0 [pid 5225] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5228] chdir("./bus" [pid 5227] chdir("./bus" [pid 5225] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5228] <... chdir resumed>) = 0 [pid 5227] <... chdir resumed>) = 0 [pid 5225] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5225] <... futex resumed>) = 1 [pid 5228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5227] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5225] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5228] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] mkdir("./bus", 000 [pid 5227] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... futex resumed>) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5227] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] <... futex resumed>) = 0 [pid 5222] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 1 [pid 5227] mkdir("./bus", 000 [pid 5222] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... mount resumed>) = 0 [pid 5230] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5228] <... mkdir resumed>) = 0 [pid 5227] <... mkdir resumed>) = 0 [pid 5226] <... mount resumed>) = 0 [pid 5225] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5230] <... openat resumed>) = 3 [pid 5228] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5225] mkdir("./bus", 000 [pid 5219] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] chdir("./bus" [pid 5228] <... futex resumed>) = 1 [pid 5227] <... futex resumed>) = 1 [pid 5226] <... openat resumed>) = 3 [pid 5223] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 0 [pid 5230] <... chdir resumed>) = 0 [pid 5226] chdir("./bus" [pid 5230] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5226] <... chdir resumed>) = 0 [pid 5222] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5228] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5227] fspick(AT_FDCWD, ".", 0 [pid 5226] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5223] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... futex resumed>) = 0 [pid 5230] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] <... fspick resumed>) = 4 [pid 5222] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... futex resumed>) = 0 [pid 5228] fspick(AT_FDCWD, ".", 0 [pid 5223] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... fspick resumed>) = 4 [pid 5230] <... futex resumed>) = 1 [pid 5228] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 1 [pid 5226] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5224] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 0 [pid 5230] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] <... futex resumed>) = 1 [pid 5227] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5222] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 1 [pid 5225] <... mkdir resumed>) = 0 [pid 5224] <... futex resumed>) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 0 [pid 5230] mkdir("./bus", 000 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5226] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5227] <... fsconfig resumed>) = 0 [pid 5226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] <... futex resumed>) = 1 [pid 5221] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5222] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... futex resumed>) = 0 [pid 5228] <... fsconfig resumed>) = 0 [pid 5227] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5221] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 0 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5222] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = 0 [pid 5230] <... mkdir resumed>) = 0 [pid 5228] <... futex resumed>) = 0 [pid 5227] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5226] mkdir("./bus", 000 [pid 5225] fspick(AT_FDCWD, ".", 0 [pid 5223] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... futex resumed>) = 0 [pid 5230] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5225] <... fspick resumed>) = 4 [pid 5223] <... futex resumed>) = 0 [pid 5222] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... futex resumed>) = 1 [pid 5226] <... mkdir resumed>) = 0 [pid 5225] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5223] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = 1 [pid 5224] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = 0 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = 1 [pid 5225] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] <... futex resumed>) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5219] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] fspick(AT_FDCWD, ".", 0 [pid 5226] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = 0 [pid 5230] <... fspick resumed>) = 4 [pid 5226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5225] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5221] <... futex resumed>) = 0 [pid 5219] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] fspick(AT_FDCWD, ".", 0 [pid 5221] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... futex resumed>) = 1 [pid 5226] <... fspick resumed>) = 4 [pid 5225] <... fsconfig resumed>) = 0 [pid 5224] <... futex resumed>) = 0 [pid 5230] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5226] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... fsconfig resumed>) = 0 [pid 5226] <... futex resumed>) = 1 [pid 5225] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 0 [pid 5230] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... futex resumed>) = 0 [pid 5226] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5221] <... futex resumed>) = 0 [pid 5230] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] <... fsconfig resumed>) = 0 [pid 5225] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5224] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = 0 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5221] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5226] <... futex resumed>) = 0 [ 64.812818][ T5226] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 64.830247][ T5230] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 64.837427][ T5230] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 64.845658][ T5226] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 5226] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5221] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5221] <... futex resumed>) = 0 [pid 5221] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5222] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5224] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5223] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 0 [pid 5224] <... futex resumed>) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5222] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5223] <... mmap resumed>) = 0x7f3774013000 [pid 5224] <... mmap resumed>) = 0x7f3774013000 [pid 5223] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5222] <... mmap resumed>) = 0x7f3774013000 [pid 5224] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5223] <... mprotect resumed>) = 0 [pid 5222] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5219] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5224] <... mprotect resumed>) = 0 [pid 5219] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] <... mprotect resumed>) = 0 [pid 5219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5223] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5219] <... mmap resumed>) = 0x7f3774013000 [pid 5223] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5222] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5219] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5222] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5252 attached [pid 5224] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5222] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5224] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5223] <... clone3 resumed> => {parent_tid=[5252]}, 88) = 5252 [pid 5252] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5223] rt_sigprocmask(SIG_SETMASK, [], [pid 5222] <... clone3 resumed> => {parent_tid=[5253]}, 88) = 5253 [pid 5219] <... mprotect resumed>) = 0 [pid 5252] <... rseq resumed>) = 0 [pid 5252] set_robust_list(0x7f37740339a0, 24 [pid 5224] <... clone3 resumed> => {parent_tid=[5254]}, 88) = 5254 [pid 5223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5222] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5254 attached [pid 5252] <... set_robust_list resumed>) = 0 [pid 5224] rt_sigprocmask(SIG_SETMASK, [], [pid 5223] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5219] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5254] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5222] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5254] <... rseq resumed>) = 0 [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5224] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5223] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5222] <... futex resumed>) = 0 [pid 5219] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5253 attached [pid 5253] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5224] <... futex resumed>) = 0 [pid 5253] <... rseq resumed>) = 0 [pid 5224] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5221] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5252] memfd_create("syzkaller", 0 [pid 5221] <... futex resumed>) = 0 [pid 5254] set_robust_list(0x7f37740339a0, 24 [pid 5253] set_robust_list(0x7f37740339a0, 24 [pid 5252] <... memfd_create resumed>) = 5 [pid 5221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5254] <... set_robust_list resumed>) = 0 [pid 5253] <... set_robust_list resumed>) = 0 [pid 5252] <... mmap resumed>) = 0x7f376bc00000 [pid 5221] <... mmap resumed>) = 0x7f3774013000 [pid 5219] <... clone3 resumed> => {parent_tid=[5255]}, 88) = 5255 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], [pid 5221] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5253] memfd_create("syzkaller", 0) = 5 [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 ./strace-static-x86_64: Process 5255 attached [pid 5254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5221] <... mprotect resumed>) = 0 [pid 5219] rt_sigprocmask(SIG_SETMASK, [], [pid 5255] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5221] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5254] memfd_create("syzkaller", 0 [pid 5255] <... rseq resumed>) = 0 [pid 5254] <... memfd_create resumed>) = 5 [pid 5221] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5219] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5219] <... futex resumed>) = 0 [pid 5254] <... mmap resumed>) = 0x7f376bc00000 [pid 5219] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5256 attached [pid 5255] set_robust_list(0x7f37740339a0, 24 [pid 5256] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5255] <... set_robust_list resumed>) = 0 [pid 5221] <... clone3 resumed> => {parent_tid=[5256]}, 88) = 5256 [pid 5256] <... rseq resumed>) = 0 [pid 5255] rt_sigprocmask(SIG_SETMASK, [], [pid 5221] rt_sigprocmask(SIG_SETMASK, [], [pid 5256] set_robust_list(0x7f37740339a0, 24 [pid 5255] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5256] <... set_robust_list resumed>) = 0 [pid 5255] memfd_create("syzkaller", 0 [pid 5221] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] rt_sigprocmask(SIG_SETMASK, [], [pid 5255] <... memfd_create resumed>) = 5 [pid 5221] <... futex resumed>) = 0 [pid 5256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5256] memfd_create("syzkaller", 0 [pid 5255] <... mmap resumed>) = 0x7f376bc00000 [pid 5221] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5256] <... memfd_create resumed>) = 5 [pid 5256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5252] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5228] <... fsconfig resumed>) = 0 [pid 5254] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5253] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5228] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5228] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5227] <... fsconfig resumed>) = 0 [pid 5227] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5227] <... futex resumed>) = 0 [pid 5227] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] <... write resumed>) = 2097152 [pid 5252] munmap(0x7f376bc00000, 138412032 [pid 5254] <... write resumed>) = 2097152 [pid 5256] <... write resumed>) = 2097152 [pid 5254] munmap(0x7f376bc00000, 138412032 [pid 5252] <... munmap resumed>) = 0 [pid 5256] munmap(0x7f376bc00000, 138412032 [pid 5254] <... munmap resumed>) = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5256] <... munmap resumed>) = 0 [pid 5252] close(5 [pid 5225] <... fsconfig resumed>) = 0 [pid 5256] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5256] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5254] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5253] <... write resumed>) = 2097152 [pid 5256] close(5 [pid 5254] close(5 [pid 5225] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] munmap(0x7f376bc00000, 138412032 [pid 5225] <... futex resumed>) = 0 [pid 5225] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... munmap resumed>) = 0 [pid 5230] <... fsconfig resumed>) = 0 [pid 5255] <... write resumed>) = 2097152 [pid 5254] <... close resumed>) = 0 [pid 5253] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5252] <... close resumed>) = 0 [pid 5256] <... close resumed>) = 0 [pid 5255] munmap(0x7f376bc00000, 138412032 [pid 5254] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5252] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] <... fsconfig resumed>) = 0 [pid 5256] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 1 [pid 5253] close(5 [pid 5252] <... futex resumed>) = 1 [pid 5230] <... futex resumed>) = 0 [pid 5226] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5256] <... futex resumed>) = 1 [pid 5255] <... munmap resumed>) = 0 [pid 5254] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] symlink("./file1", "./bus" [pid 5226] <... futex resumed>) = 0 [pid 5224] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... futex resumed>) = 0 [pid 5223] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] <... futex resumed>) = 0 [pid 5226] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] <... futex resumed>) = 0 [pid 5221] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 1 [pid 5228] symlink("./file1", "./bus" [pid 5226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5221] <... futex resumed>) = 0 [pid 5223] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5253] <... close resumed>) = 0 [pid 5230] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5228] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5224] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5226] symlink("./file1", "./bus" [pid 5255] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5253] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] close(5 [pid 5253] <... futex resumed>) = 1 [pid 5230] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5255] <... close resumed>) = 0 [pid 5253] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5224] exit_group(0 [pid 5223] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 0 [pid 5254] <... futex resumed>) = ? [pid 5224] <... exit_group resumed>) = ? [pid 5254] +++ exited with 0 +++ [pid 5226] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] exit_group(0 [pid 5222] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = ? [pid 5230] <... futex resumed>) = ? [pid 5228] <... futex resumed>) = ? [pid 5227] <... futex resumed>) = 0 [pid 5222] <... futex resumed>) = 1 [pid 5223] <... exit_group resumed>) = ? [pid 5255] <... futex resumed>) = 1 [pid 5252] +++ exited with 0 +++ [pid 5227] symlink("./file1", "./bus" [pid 5226] <... futex resumed>) = 1 [pid 5221] <... futex resumed>) = 0 [pid 5222] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... futex resumed>) = 0 [pid 5255] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] +++ exited with 0 +++ [pid 5228] +++ exited with 0 +++ [pid 5224] +++ exited with 0 +++ [pid 5223] +++ exited with 0 +++ [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=46 /* 0.46 s */} --- [pid 5217] restart_syscall(<... resuming interrupted clone ...> [pid 5226] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5221] exit_group(0) = ? [pid 5226] <... futex resumed>) = ? [pid 5226] +++ exited with 0 +++ [pid 5219] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = ? [pid 5227] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5217] <... restart_syscall resumed>) = 0 [ 65.190356][ T5230] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 65.191126][ T5228] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 65.212788][ T5226] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 65.230420][ T5227] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5225] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5227] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] symlink("./file1", "./bus" [pid 5256] +++ exited with 0 +++ [pid 5221] +++ exited with 0 +++ [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 5218] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5217] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=45 /* 0.45 s */} --- [pid 5218] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5218] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5217] <... openat resumed>) = 3 [pid 5218] <... openat resumed>) = 3 [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5227] <... futex resumed>) = 1 [pid 5225] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5222] <... futex resumed>) = 0 [pid 5219] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] newfstatat(3, "", [pid 5217] newfstatat(3, "", [pid 5215] <... openat resumed>) = 3 [pid 5227] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] exit_group(0 [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] newfstatat(3, "", [pid 5253] <... futex resumed>) = ? [pid 5227] <... futex resumed>) = ? [pid 5225] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... exit_group resumed>) = ? [pid 5218] getdents64(3, [pid 5217] getdents64(3, [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5253] +++ exited with 0 +++ [pid 5227] +++ exited with 0 +++ [pid 5225] <... futex resumed>) = 1 [pid 5219] <... futex resumed>) = 0 [pid 5225] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5217] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5219] exit_group(0 [pid 5215] getdents64(3, [pid 5255] <... futex resumed>) = ? [pid 5225] <... futex resumed>) = ? [pid 5222] +++ exited with 0 +++ [pid 5219] <... exit_group resumed>) = ? [pid 5218] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5255] +++ exited with 0 +++ [pid 5225] +++ exited with 0 +++ [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5222, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=39 /* 0.39 s */} --- [pid 5215] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5216] restart_syscall(<... resuming interrupted clone ...> [pid 5219] +++ exited with 0 +++ [pid 5216] <... restart_syscall resumed>) = 0 [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5219, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=42 /* 0.42 s */} --- [pid 5216] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [ 65.247850][ T5225] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5214] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5216] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5214] <... openat resumed>) = 3 [pid 5216] newfstatat(3, "", [pid 5214] newfstatat(3, "", [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5214] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5216] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5216] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] <... umount2 resumed>) = 0 [pid 5215] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5215] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5215] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5215] close(4) = 0 [pid 5215] rmdir("./0/bus") = 0 [pid 5215] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] unlink("./0/binderfs") = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5215] close(3) = 0 [pid 5215] rmdir("./0") = 0 [pid 5215] mkdir("./1", 0777) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [pid 5215] close(3 [pid 5218] <... umount2 resumed>) = 0 [pid 5218] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5218] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(4, [pid 5214] <... umount2 resumed>) = 0 [pid 5218] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./0/bus") = 0 [pid 5218] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] unlink("./0/binderfs" [pid 5217] <... umount2 resumed>) = 0 [pid 5218] <... unlink resumed>) = 0 [pid 5217] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3) = 0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] rmdir("./0") = 0 [pid 5217] newfstatat(AT_FDCWD, "./0/bus", [pid 5214] newfstatat(AT_FDCWD, "./0/bus", [pid 5218] mkdir("./1", 0777) = 0 [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5217] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5216] <... umount2 resumed>) = 0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] <... openat resumed>) = 4 [pid 5214] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5217] newfstatat(4, "", [pid 5216] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... openat resumed>) = 4 [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(4, "", [pid 5217] getdents64(4, [pid 5216] newfstatat(AT_FDCWD, "./0/bus", [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] getdents64(4, [pid 5218] <... openat resumed>) = 3 [pid 5217] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5214] close(4) = 0 [pid 5216] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] close(4 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] rmdir("./0/bus" [pid 5218] ioctl(3, LOOP_CLR_FD [pid 5217] <... close resumed>) = 0 [pid 5216] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5218] <... ioctl resumed>) = 0 [pid 5217] rmdir("./0/bus" [pid 5214] <... rmdir resumed>) = 0 [pid 5216] <... openat resumed>) = 4 [pid 5217] <... rmdir resumed>) = 0 [pid 5218] close(3 [pid 5216] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] getdents64(4, [pid 5217] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] unlink("./0/binderfs" [pid 5214] unlink("./0/binderfs" [pid 5217] <... unlink resumed>) = 0 [pid 5214] <... unlink resumed>) = 0 [pid 5217] getdents64(3, [pid 5216] getdents64(4, [pid 5214] getdents64(3, [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5217] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5216] close(4 [pid 5217] close(3 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5216] <... close resumed>) = 0 [pid 5216] rmdir("./0/bus" [pid 5214] close(3) = 0 [pid 5216] <... rmdir resumed>) = 0 [pid 5214] rmdir("./0") = 0 [pid 5217] <... close resumed>) = 0 [pid 5216] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] mkdir("./1", 0777 [pid 5217] rmdir("./0" [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] <... mkdir resumed>) = 0 [pid 5217] <... rmdir resumed>) = 0 [pid 5216] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5217] mkdir("./1", 0777) = 0 [pid 5216] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5216] unlink("./0/binderfs") = 0 [pid 5214] <... openat resumed>) = 3 [pid 5216] getdents64(3, [pid 5217] <... openat resumed>) = 3 [pid 5217] ioctl(3, LOOP_CLR_FD [pid 5216] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5214] ioctl(3, LOOP_CLR_FD [pid 5217] <... ioctl resumed>) = 0 [pid 5216] close(3 [pid 5217] close(3 [pid 5214] <... ioctl resumed>) = 0 [pid 5216] <... close resumed>) = 0 [pid 5216] rmdir("./0" [pid 5214] close(3 [pid 5216] <... rmdir resumed>) = 0 [pid 5216] mkdir("./1", 0777) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5216] ioctl(3, LOOP_CLR_FD) = 0 [pid 5216] close(3 [pid 5215] <... close resumed>) = 0 [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5257 ./strace-static-x86_64: Process 5257 attached [pid 5257] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5257] chdir("./1") = 0 [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5257] setpgid(0, 0) = 0 [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5257] write(3, "1000", 4) = 4 [pid 5257] close(3) = 0 [pid 5257] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5257] write(1, "executing program\n", 18) = 18 [pid 5257] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5257] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5257] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5257] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5258]}, 88) = 5258 ./strace-static-x86_64: Process 5258 attached [pid 5257] rt_sigprocmask(SIG_SETMASK, [], [pid 5258] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5257] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5257] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5258] <... rseq resumed>) = 0 [pid 5258] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5258] memfd_create("syzkaller", 0) = 3 [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5214] <... close resumed>) = 0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5259 attached , child_tidptr=0x55556d635690) = 5259 [pid 5259] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5259] chdir("./1") = 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5259] setpgid(0, 0) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5259] close(3) = 0 executing program [pid 5259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5259] write(1, "executing program\n", 18) = 18 [pid 5259] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5259] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5259] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5260]}, 88) = 5260 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5259] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5260 attached [pid 5260] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5260] set_robust_list(0x7f37740549a0, 24 [pid 5218] <... close resumed>) = 0 [pid 5260] <... set_robust_list resumed>) = 0 [pid 5260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5260] memfd_create("syzkaller", 0) = 3 [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5261 [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 ./strace-static-x86_64: Process 5261 attached [pid 5261] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5261] chdir("./1") = 0 [pid 5261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5261] setpgid(0, 0) = 0 [pid 5261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5261] write(3, "1000", 4) = 4 [pid 5261] close(3) = 0 [pid 5261] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5261] write(1, "executing program\n", 18executing program ) = 18 [pid 5261] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5261] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5261] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5261] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5261] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5261] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5262 attached => {parent_tid=[5262]}, 88) = 5262 [pid 5262] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5261] rt_sigprocmask(SIG_SETMASK, [], [pid 5262] <... rseq resumed>) = 0 [pid 5261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] <... close resumed>) = 0 [pid 5262] set_robust_list(0x7f37740549a0, 24 [pid 5261] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... set_robust_list resumed>) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5262] rt_sigprocmask(SIG_SETMASK, [], [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5262] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5263 attached [pid 5262] memfd_create("syzkaller", 0 [pid 5261] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5263] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5263] chdir("./1" [pid 5262] <... memfd_create resumed>) = 3 [pid 5262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5263] <... chdir resumed>) = 0 [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5263 [pid 5263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5263] setpgid(0, 0) = 0 [pid 5263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5217] <... close resumed>) = 0 [pid 5263] write(3, "1000", 4) = 4 [pid 5263] close(3) = 0 [pid 5263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5263] write(1, "executing program\n", 18executing program ) = 18 [pid 5263] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5264 [pid 5263] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5264 attached [pid 5264] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5264] chdir("./1") = 0 [pid 5264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5264] setpgid(0, 0 [pid 5263] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5263] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5264] <... setpgid resumed>) = 0 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5263] <... mmap resumed>) = 0x7f3774034000 [pid 5263] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5264] <... openat resumed>) = 3 [pid 5263] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5264] write(3, "1000", 4) = 4 [pid 5263] <... clone3 resumed> => {parent_tid=[5265]}, 88) = 5265 ./strace-static-x86_64: Process 5265 attached [pid 5265] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], [pid 5265] <... rseq resumed>) = 0 [pid 5264] close(3 [pid 5263] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5265] set_robust_list(0x7f37740549a0, 24 [pid 5263] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... set_robust_list resumed>) = 0 [pid 5264] <... close resumed>) = 0 [pid 5264] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5264] write(1, "executing program\n", 18) = 18 [pid 5264] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5264] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5264] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5264] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5265] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] <... mprotect resumed>) = 0 [pid 5263] <... futex resumed>) = 0 [pid 5265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5264] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5263] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5265] memfd_create("syzkaller", 0 [pid 5264] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5265] <... memfd_create resumed>) = 3 [pid 5265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5264] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5265] <... mmap resumed>) = 0x7f376bc00000 ./strace-static-x86_64: Process 5266 attached [pid 5264] <... clone3 resumed> => {parent_tid=[5266]}, 88) = 5266 [pid 5266] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5264] rt_sigprocmask(SIG_SETMASK, [], [pid 5266] <... rseq resumed>) = 0 [pid 5264] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] set_robust_list(0x7f37740549a0, 24 [pid 5264] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... set_robust_list resumed>) = 0 [pid 5264] <... futex resumed>) = 0 [pid 5266] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] memfd_create("syzkaller", 0) = 3 [pid 5266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5258] <... write resumed>) = 20699119 [pid 5258] munmap(0x7f376bc00000, 138412032) = 0 [pid 5258] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5258] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5258] close(3) = 0 [pid 5258] close(4) = 0 [pid 5260] <... write resumed>) = 20699119 [pid 5258] mkdir("./bus", 0777 [pid 5260] munmap(0x7f376bc00000, 138412032 [pid 5258] <... mkdir resumed>) = 0 [pid 5258] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5260] <... munmap resumed>) = 0 [ 66.728829][ T5258] loop1: detected capacity change from 0 to 40427 [ 66.764257][ T5258] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [pid 5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5260] ioctl(4, LOOP_SET_FD, 3 [pid 5262] <... write resumed>) = 20699119 [pid 5260] <... ioctl resumed>) = 0 [pid 5262] munmap(0x7f376bc00000, 138412032 [pid 5260] close(3) = 0 [pid 5260] close(4) = 0 [pid 5260] mkdir("./bus", 0777) = 0 [pid 5260] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5262] <... munmap resumed>) = 0 [ 66.789812][ T5258] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 66.791089][ T5260] loop0: detected capacity change from 0 to 40427 [ 66.827644][ T5258] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5262] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5266] <... write resumed>) = 20699119 [pid 5266] munmap(0x7f376bc00000, 138412032 [pid 5262] <... openat resumed>) = 4 [pid 5262] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5266] <... munmap resumed>) = 0 [pid 5266] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5266] ioctl(4, LOOP_SET_FD, 3 [pid 5262] close(3) = 0 [pid 5262] close(4) = 0 [pid 5262] mkdir("./bus", 0777) = 0 [ 66.868440][ T5260] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 66.878606][ T5262] loop4: detected capacity change from 0 to 40427 [ 66.890473][ T5260] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 66.909724][ T5266] loop3: detected capacity change from 0 to 40427 [pid 5262] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5266] <... ioctl resumed>) = 0 [pid 5266] close(3) = 0 [pid 5266] close(4) = 0 [pid 5265] <... write resumed>) = 20699119 [ 66.917575][ T5262] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 66.948079][ T5262] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 5266] mkdir("./bus", 0777 [pid 5265] munmap(0x7f376bc00000, 138412032 [pid 5266] <... mkdir resumed>) = 0 [pid 5266] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5265] <... munmap resumed>) = 0 [pid 5265] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 66.963630][ T5260] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.980806][ T5266] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 66.999470][ T5262] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.007045][ T5266] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 5265] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5265] close(3) = 0 [pid 5265] close(4) = 0 [ 67.008162][ T5265] loop2: detected capacity change from 0 to 40427 [ 67.039330][ T5258] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 67.059353][ T5266] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 5265] mkdir("./bus", 0777) = 0 [pid 5265] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5258] <... mount resumed>) = 0 [pid 5258] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 67.077369][ T5258] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 67.085431][ T5265] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 67.114921][ T5265] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 5258] chdir("./bus") = 0 [pid 5258] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5258] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5262] <... mount resumed>) = 0 [pid 5258] mkdir("./bus", 000 [pid 5257] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5257] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... openat resumed>) = 3 [pid 5260] <... mount resumed>) = 0 [pid 5262] chdir("./bus" [pid 5260] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5262] <... chdir resumed>) = 0 [pid 5260] <... openat resumed>) = 3 [pid 5262] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5260] chdir("./bus" [pid 5262] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5260] <... chdir resumed>) = 0 [pid 5262] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5262] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5262] mkdir("./bus", 000 [pid 5261] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5261] <... futex resumed>) = 0 [pid 5260] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... mkdir resumed>) = 0 [pid 5261] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... futex resumed>) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5258] <... mkdir resumed>) = 0 [ 67.124590][ T5262] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 67.133074][ T5260] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 67.133139][ T5262] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.150448][ T5260] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 5262] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5260] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = 1 [pid 5262] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 0 [pid 5261] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] mkdir("./bus", 000 [pid 5257] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 1 [pid 5262] fspick(AT_FDCWD, ".", 0 [pid 5258] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 1 [pid 5262] <... fspick resumed>) = 4 [pid 5261] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] fspick(AT_FDCWD, ".", 0 [pid 5257] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] <... fspick resumed>) = 4 [pid 5258] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] <... futex resumed>) = 0 [pid 5257] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... futex resumed>) = 0 [pid 5257] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5262] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5260] <... mkdir resumed>) = 0 [pid 5258] <... fsconfig resumed>) = 0 [pid 5260] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... fsconfig resumed>) = 0 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = 1 [pid 5262] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 0 [pid 5258] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 1 [pid 5262] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5261] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5257] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... futex resumed>) = 1 [pid 5260] fspick(AT_FDCWD, ".", 0) = 4 [pid 5260] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... futex resumed>) = 1 [pid 5260] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5260] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5259] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... futex resumed>) = 1 [pid 5260] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5266] <... mount resumed>) = 0 [pid 5266] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5266] chdir("./bus") = 0 [pid 5266] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5266] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5264] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5264] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 67.178771][ T5265] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.189228][ T5266] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 67.199979][ T5266] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 5266] mkdir("./bus", 000 [pid 5261] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5261] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 0 [pid 5261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5261] <... mmap resumed>) = 0x7f3774013000 [pid 5257] <... mmap resumed>) = 0x7f3774013000 [pid 5261] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5259] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5257] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5261] <... mprotect resumed>) = 0 [pid 5259] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] <... mprotect resumed>) = 0 [pid 5261] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5259] <... futex resumed>) = 0 [pid 5257] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5261] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5257] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5261] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5259] <... mmap resumed>) = 0x7f3774013000 [pid 5257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5288 attached [pid 5261] <... clone3 resumed> => {parent_tid=[5287]}, 88) = 5287 [pid 5259] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5261] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] <... mprotect resumed>) = 0 [pid 5257] <... clone3 resumed> => {parent_tid=[5288]}, 88) = 5288 ./strace-static-x86_64: Process 5287 attached [pid 5266] <... mkdir resumed>) = 0 [pid 5261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5257] rt_sigprocmask(SIG_SETMASK, [], [pid 5287] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5266] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5287] <... rseq resumed>) = 0 [pid 5266] <... futex resumed>) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5257] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] set_robust_list(0x7f37740339a0, 24 [pid 5266] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5261] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5257] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5289 attached [pid 5288] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5287] <... set_robust_list resumed>) = 0 [pid 5266] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] <... futex resumed>) = 0 [pid 5259] <... clone3 resumed> => {parent_tid=[5289]}, 88) = 5289 [pid 5288] <... rseq resumed>) = 0 [pid 5265] <... mount resumed>) = 0 [pid 5288] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5289] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5288] rt_sigprocmask(SIG_SETMASK, [], [pid 5287] rt_sigprocmask(SIG_SETMASK, [], [pid 5266] fspick(AT_FDCWD, ".", 0 [pid 5264] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] rt_sigprocmask(SIG_SETMASK, [], [pid 5257] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5265] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5289] <... rseq resumed>) = 0 [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5288] memfd_create("syzkaller", 0 [pid 5289] set_robust_list(0x7f37740339a0, 24 [pid 5288] <... memfd_create resumed>) = 5 [pid 5287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] <... fspick resumed>) = 4 [pid 5265] <... openat resumed>) = 3 [pid 5259] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5265] chdir("./bus" [pid 5288] <... mmap resumed>) = 0x7f376bc00000 [pid 5289] <... set_robust_list resumed>) = 0 [pid 5287] memfd_create("syzkaller", 0 [pid 5266] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5289] rt_sigprocmask(SIG_SETMASK, [], [pid 5287] <... memfd_create resumed>) = 5 [pid 5266] <... futex resumed>) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5259] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5266] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5264] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] memfd_create("syzkaller", 0 [pid 5287] <... mmap resumed>) = 0x7f376bc00000 [pid 5266] <... fsconfig resumed>) = 0 [pid 5264] <... futex resumed>) = 0 [pid 5289] <... memfd_create resumed>) = 5 [pid 5266] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... chdir resumed>) = 0 [pid 5264] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5266] <... futex resumed>) = 0 [pid 5265] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] <... mmap resumed>) = 0x7f376bc00000 [pid 5266] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5265] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [ 67.258908][ T5265] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 67.272275][ T5265] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 5264] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] mkdir("./bus", 000 [pid 5263] <... futex resumed>) = 0 [pid 5263] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5265] <... mkdir resumed>) = 0 [pid 5265] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5263] <... futex resumed>) = 0 [pid 5289] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5265] fspick(AT_FDCWD, ".", 0 [pid 5263] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... fspick resumed>) = 4 [pid 5265] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5265] <... futex resumed>) = 0 [pid 5263] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5265] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5263] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5263] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] <... futex resumed>) = 0 [pid 5265] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5265] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5265] <... futex resumed>) = 1 [pid 5264] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... futex resumed>) = 0 [pid 5265] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] <... futex resumed>) = 0 [pid 5263] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... fsconfig resumed>) = 0 [pid 5265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5263] <... futex resumed>) = 0 [pid 5265] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5263] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... mmap resumed>) = 0x7f3774013000 [pid 5288] <... write resumed>) = 2097152 [pid 5264] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5260] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5264] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5290]}, 88) = 5290 [pid 5264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5264] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5264] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5290 attached [pid 5290] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5290] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5290] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5290] memfd_create("syzkaller", 0) = 5 [pid 5290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5287] <... write resumed>) = 2097152 [pid 5288] munmap(0x7f376bc00000, 138412032 [pid 5290] <... mmap resumed>) = 0x7f376bc00000 [pid 5289] <... write resumed>) = 2097152 [pid 5288] <... munmap resumed>) = 0 [pid 5287] munmap(0x7f376bc00000, 138412032 [pid 5289] munmap(0x7f376bc00000, 138412032 [pid 5287] <... munmap resumed>) = 0 [pid 5288] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5263] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5288] close(5 [pid 5287] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5289] <... munmap resumed>) = 0 [pid 5287] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5263] <... futex resumed>) = 0 [pid 5263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5263] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5263] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5287] close(5 [pid 5263] <... clone3 resumed> => {parent_tid=[5291]}, 88) = 5291 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], [pid 5289] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5263] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5291 attached [pid 5290] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5289] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5263] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... fsconfig resumed>) = 0 [pid 5291] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5263] <... futex resumed>) = 0 [pid 5262] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... rseq resumed>) = 0 [pid 5289] close(5 [pid 5263] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5291] set_robust_list(0x7f37740339a0, 24 [pid 5262] <... futex resumed>) = 0 [pid 5291] <... set_robust_list resumed>) = 0 [pid 5291] rt_sigprocmask(SIG_SETMASK, [], [pid 5258] <... fsconfig resumed>) = 0 [pid 5262] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5287] <... close resumed>) = 0 [pid 5266] <... fsconfig resumed>) = 0 [pid 5258] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] memfd_create("syzkaller", 0 [pid 5258] <... futex resumed>) = 0 [pid 5291] <... memfd_create resumed>) = 5 [pid 5258] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5288] <... close resumed>) = 0 [pid 5266] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] <... close resumed>) = 0 [pid 5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5289] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... mmap resumed>) = 0x7f376bc00000 [pid 5289] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 1 [pid 5287] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5259] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 0 [pid 5290] <... write resumed>) = 2097152 [pid 5289] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5287] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5259] <... futex resumed>) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = 1 [pid 5262] symlink("./file1", "./bus" [pid 5261] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] symlink("./file1", "./bus" [pid 5259] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] symlink("./file1", "./bus" [pid 5257] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] munmap(0x7f376bc00000, 138412032 [pid 5291] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5290] <... munmap resumed>) = 0 [pid 5290] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5290] close(5 [pid 5291] <... write resumed>) = 2097152 [pid 5262] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5260] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5258] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5260] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = 1 [pid 5262] <... futex resumed>) = 1 [pid 5261] <... futex resumed>) = 0 [pid 5260] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] exit_group(0 [pid 5257] <... futex resumed>) = 0 [pid 5258] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] exit_group(0) = ? [pid 5290] <... close resumed>) = 0 [pid 5289] <... futex resumed>) = ? [pid 5287] <... futex resumed>) = ? [pid 5262] <... futex resumed>) = ? [pid 5260] <... futex resumed>) = ? [pid 5259] <... exit_group resumed>) = ? [pid 5257] exit_group(0 [pid 5287] +++ exited with 0 +++ [pid 5257] <... exit_group resumed>) = ? [pid 5289] +++ exited with 0 +++ [pid 5290] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] munmap(0x7f376bc00000, 138412032 [pid 5290] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = ? [pid 5265] <... fsconfig resumed>) = 0 [pid 5264] <... futex resumed>) = 0 [pid 5262] +++ exited with 0 +++ [pid 5261] +++ exited with 0 +++ [pid 5260] +++ exited with 0 +++ [pid 5259] +++ exited with 0 +++ [pid 5258] <... futex resumed>) = ? [pid 5291] <... munmap resumed>) = 0 [pid 5290] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] +++ exited with 0 +++ [pid 5265] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... futex resumed>) = 0 [pid 5264] <... futex resumed>) = 1 [pid 5258] +++ exited with 0 +++ [pid 5257] +++ exited with 0 +++ [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5261, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=46 /* 0.46 s */} --- [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} --- [pid 5291] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 67.528074][ T5262] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 67.539236][ T5260] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 67.549795][ T5258] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5266] symlink("./file1", "./bus" [pid 5265] <... futex resumed>) = 0 [pid 5264] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5215] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5291] close(5 [pid 5266] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5265] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5266] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5266] <... futex resumed>) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5218] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5215] <... openat resumed>) = 3 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(3, "", [pid 5218] <... openat resumed>) = 3 [pid 5264] exit_group(0 [pid 5218] newfstatat(3, "", [pid 5214] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5290] <... futex resumed>) = ? [pid 5264] <... exit_group resumed>) = ? [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5290] +++ exited with 0 +++ [pid 5218] getdents64(3, [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] <... openat resumed>) = 3 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5218] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5215] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5291] <... close resumed>) = 0 [pid 5266] +++ exited with 0 +++ [pid 5264] +++ exited with 0 +++ [pid 5218] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] newfstatat(3, "", [pid 5291] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5291] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] <... futex resumed>) = 0 [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5264, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=43 /* 0.43 s */} --- [pid 5263] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5265] <... futex resumed>) = 0 [pid 5263] <... futex resumed>) = 1 [ 67.591248][ T5266] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5263] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5265] symlink("./file1", "./bus" [pid 5214] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5217] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5217] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5217] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5263] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5265] <... symlink resumed>) = -1 EEXIST (File exists) [ 67.640355][ T5265] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5265] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] exit_group(0 [pid 5265] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] <... exit_group resumed>) = ? [pid 5265] <... futex resumed>) = ? [pid 5291] <... futex resumed>) = ? [pid 5291] +++ exited with 0 +++ [pid 5265] +++ exited with 0 +++ [pid 5263] +++ exited with 0 +++ [pid 5215] <... umount2 resumed>) = 0 [pid 5215] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5263, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=44 /* 0.44 s */} --- [pid 5215] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5215] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5216] <... openat resumed>) = 3 [pid 5215] <... openat resumed>) = 4 [pid 5216] newfstatat(3, "", [pid 5215] newfstatat(4, "", [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(3, [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(4, [pid 5216] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5216] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5215] close(4) = 0 [pid 5215] rmdir("./1/bus") = 0 [pid 5215] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] unlink("./1/binderfs") = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5215] close(3) = 0 [pid 5215] rmdir("./1") = 0 [pid 5215] mkdir("./2", 0777) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [pid 5215] close(3 [pid 5217] <... umount2 resumed>) = 0 [pid 5217] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... umount2 resumed>) = 0 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5217] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5217] close(4) = 0 [pid 5217] rmdir("./1/bus") = 0 [pid 5214] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] <... umount2 resumed>) = 0 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(AT_FDCWD, "./1/bus", [pid 5217] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] unlink("./1/binderfs" [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5214] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] <... unlink resumed>) = 0 [pid 5214] getdents64(4, [pid 5217] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5217] close(3) = 0 [pid 5217] rmdir("./1") = 0 [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] mkdir("./2", 0777 [pid 5214] getdents64(4, [pid 5217] <... mkdir resumed>) = 0 [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] close(4 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] <... close resumed>) = 0 [pid 5218] newfstatat(AT_FDCWD, "./1/bus", [pid 5214] rmdir("./1/bus" [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] <... openat resumed>) = 3 [pid 5214] <... rmdir resumed>) = 0 [pid 5218] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] <... openat resumed>) = 4 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] ioctl(3, LOOP_CLR_FD [pid 5214] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5217] <... ioctl resumed>) = 0 [pid 5218] newfstatat(4, "", [pid 5214] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] close(3 [pid 5214] unlink("./1/binderfs" [pid 5218] getdents64(4, [pid 5214] <... unlink resumed>) = 0 [pid 5218] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./1/bus") = 0 [pid 5218] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] unlink("./1/binderfs") = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3 [pid 5214] getdents64(3, [pid 5218] <... close resumed>) = 0 [pid 5218] rmdir("./1") = 0 [pid 5218] mkdir("./2", 0777 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] <... mkdir resumed>) = 0 [pid 5214] close(3 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5218] ioctl(3, LOOP_CLR_FD) = 0 [pid 5218] close(3 [pid 5214] <... close resumed>) = 0 [pid 5214] rmdir("./1") = 0 [pid 5216] <... umount2 resumed>) = 0 [pid 5216] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] mkdir("./2", 0777) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5216] newfstatat(AT_FDCWD, "./1/bus", [pid 5214] ioctl(3, LOOP_CLR_FD [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] <... ioctl resumed>) = 0 [pid 5216] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] close(3 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5216] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5216] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5216] close(4) = 0 [pid 5216] rmdir("./1/bus") = 0 [pid 5216] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] unlink("./1/binderfs") = 0 [pid 5216] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5216] close(3) = 0 [pid 5216] rmdir("./1") = 0 [pid 5216] mkdir("./2", 0777) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5216] ioctl(3, LOOP_CLR_FD) = 0 [pid 5216] close(3 [pid 5215] <... close resumed>) = 0 [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5292 ./strace-static-x86_64: Process 5292 attached [pid 5292] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5292] chdir("./2") = 0 [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5292] setpgid(0, 0) = 0 [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5292] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5292] write(1, "executing program\n", 18) = 18 [pid 5292] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5292] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5292] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5292] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5293 attached => {parent_tid=[5293]}, 88) = 5293 [pid 5293] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5292] rt_sigprocmask(SIG_SETMASK, [], [pid 5293] <... rseq resumed>) = 0 [pid 5292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5293] set_robust_list(0x7f37740549a0, 24 [pid 5292] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... set_robust_list resumed>) = 0 [pid 5292] <... futex resumed>) = 0 [pid 5293] rt_sigprocmask(SIG_SETMASK, [], [pid 5292] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5293] memfd_create("syzkaller", 0) = 3 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5216] <... close resumed>) = 0 [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5294 attached , child_tidptr=0x55556d635690) = 5294 [pid 5294] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5294] chdir("./2" [pid 5217] <... close resumed>) = 0 [pid 5294] <... chdir resumed>) = 0 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5294] setpgid(0, 0) = 0 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5294] write(3, "1000", 4) = 4 [pid 5294] close(3) = 0 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5294] symlink("/dev/binderfs", "./binderfs" [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5295 ./strace-static-x86_64: Process 5295 attached [pid 5295] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5294] <... symlink resumed>) = 0 [pid 5295] chdir("./2") = 0 [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5295] setpgid(0, 0) = 0 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] write(3, "1000", 4) = 4 executing program [pid 5295] close(3 [pid 5294] write(1, "executing program\n", 18 [pid 5218] <... close resumed>) = 0 [pid 5295] <... close resumed>) = 0 [pid 5294] <... write resumed>) = 18 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5295] symlink("/dev/binderfs", "./binderfs" [pid 5294] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... close resumed>) = 0 [pid 5294] <... futex resumed>) = 0 [pid 5294] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5294] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5294] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5294] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5297 attached => {parent_tid=[5297]}, 88) = 5297 [pid 5297] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5294] rt_sigprocmask(SIG_SETMASK, [], [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5297] <... rseq resumed>) = 0 ./strace-static-x86_64: Process 5296 attached ./strace-static-x86_64: Process 5298 attached [pid 5297] set_robust_list(0x7f37740549a0, 24executing program [pid 5295] <... symlink resumed>) = 0 [pid 5294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5296] set_robust_list(0x55556d6356a0, 24 [pid 5298] set_robust_list(0x55556d6356a0, 24 [pid 5297] <... set_robust_list resumed>) = 0 [pid 5295] write(1, "executing program\n", 18 [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5296 [pid 5298] <... set_robust_list resumed>) = 0 [pid 5295] <... write resumed>) = 18 [pid 5296] <... set_robust_list resumed>) = 0 [pid 5298] chdir("./2" [pid 5297] rt_sigprocmask(SIG_SETMASK, [], [pid 5295] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] chdir("./2" [pid 5298] <... chdir resumed>) = 0 [pid 5297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5294] <... futex resumed>) = 0 [pid 5296] <... chdir resumed>) = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5297] memfd_create("syzkaller", 0 [pid 5295] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5294] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] <... clone resumed>, child_tidptr=0x55556d635690) = 5298 [pid 5296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5298] <... prctl resumed>) = 0 [pid 5295] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5296] <... prctl resumed>) = 0 [pid 5298] setpgid(0, 0 [pid 5297] <... memfd_create resumed>) = 3 [pid 5295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5296] setpgid(0, 0 [pid 5298] <... setpgid resumed>) = 0 [pid 5297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5296] <... setpgid resumed>) = 0 [pid 5297] <... mmap resumed>) = 0x7f376bc00000 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5295] <... mmap resumed>) = 0x7f3774034000 [pid 5298] <... openat resumed>) = 3 [pid 5295] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5296] <... openat resumed>) = 3 [pid 5295] <... mprotect resumed>) = 0 [pid 5296] write(3, "1000", 4 [pid 5298] write(3, "1000", 4 [pid 5295] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5298] <... write resumed>) = 4 [pid 5296] <... write resumed>) = 4 [pid 5298] close(3 [pid 5296] close(3 [pid 5298] <... close resumed>) = 0 [pid 5295] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5298] symlink("/dev/binderfs", "./binderfs" [pid 5295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}executing program [pid 5296] <... close resumed>) = 0 [pid 5298] <... symlink resumed>) = 0 [pid 5296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5296] write(1, "executing program\n", 18) = 18 [pid 5296] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5296] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5296] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5296] rt_sigprocmask(SIG_BLOCK, ~[], executing program [], 8) = 0 [pid 5296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5299 attached [pid 5295] <... clone3 resumed> => {parent_tid=[5299]}, 88) = 5299 [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5298] write(1, "executing program\n", 18 [pid 5299] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5295] rt_sigprocmask(SIG_SETMASK, [], [pid 5299] <... rseq resumed>) = 0 [pid 5298] <... write resumed>) = 18 [pid 5295] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5300 attached [pid 5299] set_robust_list(0x7f37740549a0, 24 [pid 5296] <... clone3 resumed> => {parent_tid=[5300]}, 88) = 5300 [pid 5298] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5299] <... set_robust_list resumed>) = 0 [pid 5296] rt_sigprocmask(SIG_SETMASK, [], [pid 5298] <... futex resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5300] <... rseq resumed>) = 0 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], [pid 5296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5298] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5295] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5300] set_robust_list(0x7f37740549a0, 24 [pid 5299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5298] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5300] <... set_robust_list resumed>) = 0 [pid 5300] rt_sigprocmask(SIG_SETMASK, [], [pid 5298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5300] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5296] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5296] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5299] memfd_create("syzkaller", 0 [pid 5300] <... futex resumed>) = 0 [pid 5298] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5298] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5300] memfd_create("syzkaller", 0 [pid 5299] <... memfd_create resumed>) = 3 [pid 5298] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5300] <... memfd_create resumed>) = 3 [pid 5300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5300] <... mmap resumed>) = 0x7f376bc00000 [pid 5299] <... mmap resumed>) = 0x7f376bc00000 ./strace-static-x86_64: Process 5301 attached [pid 5298] <... clone3 resumed> => {parent_tid=[5301]}, 88) = 5301 [pid 5298] rt_sigprocmask(SIG_SETMASK, [], [pid 5301] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5301] <... rseq resumed>) = 0 [pid 5301] set_robust_list(0x7f37740549a0, 24 [pid 5298] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5301] <... set_robust_list resumed>) = 0 [pid 5301] rt_sigprocmask(SIG_SETMASK, [], [pid 5298] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5301] memfd_create("syzkaller", 0) = 3 [pid 5301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5293] <... write resumed>) = 20699119 [pid 5293] munmap(0x7f376bc00000, 138412032) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5293] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5293] close(3) = 0 [pid 5293] close(4) = 0 [pid 5293] mkdir("./bus", 0777) = 0 [ 68.945777][ T5293] loop1: detected capacity change from 0 to 40427 [pid 5293] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5297] <... write resumed>) = 20699119 [ 68.999737][ T5293] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 69.007521][ T5293] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 5297] munmap(0x7f376bc00000, 138412032) = 0 [pid 5297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 69.066178][ T5293] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5297] close(3) = 0 [pid 5297] close(4) = 0 [pid 5297] mkdir("./bus", 0777) = 0 [ 69.118383][ T5297] loop2: detected capacity change from 0 to 40427 [ 69.157366][ T5297] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [pid 5297] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5293] <... mount resumed>) = 0 [pid 5293] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5293] chdir("./bus") = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5293] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5293] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] <... futex resumed>) = 0 [pid 5293] mkdir("./bus", 000 [ 69.169404][ T5293] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 69.176533][ T5293] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.185084][ T5297] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 5292] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... mkdir resumed>) = 0 [pid 5293] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = 1 [pid 5293] fspick(AT_FDCWD, ".", 0 [pid 5292] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... fspick resumed>) = 4 [pid 5299] <... write resumed>) = 20699119 [pid 5293] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = 1 [pid 5293] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5292] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... fsconfig resumed>) = 0 [pid 5299] munmap(0x7f376bc00000, 138412032 [pid 5293] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5301] <... write resumed>) = 20699119 [ 69.227255][ T5297] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 5293] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5301] munmap(0x7f376bc00000, 138412032 [pid 5299] <... munmap resumed>) = 0 [pid 5299] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5299] close(3 [pid 5301] <... munmap resumed>) = 0 [pid 5300] <... write resumed>) = 20699119 [pid 5299] <... close resumed>) = 0 [pid 5299] close(4 [pid 5300] munmap(0x7f376bc00000, 138412032 [pid 5299] <... close resumed>) = 0 [pid 5299] mkdir("./bus", 0777) = 0 [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5292] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5301] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5292] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5301] <... openat resumed>) = 4 [pid 5292] <... mprotect resumed>) = 0 [pid 5301] ioctl(4, LOOP_SET_FD, 3 [pid 5292] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5299] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5292] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5309]}, 88) = 5309 [pid 5300] <... munmap resumed>) = 0 [pid 5292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5292] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5309 attached [pid 5292] <... futex resumed>) = 0 [ 69.298803][ T5299] loop3: detected capacity change from 0 to 40427 [ 69.334205][ T5301] loop0: detected capacity change from 0 to 40427 [pid 5309] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5300] <... openat resumed>) = 4 [pid 5292] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5309] <... rseq resumed>) = 0 [pid 5300] ioctl(4, LOOP_SET_FD, 3 [pid 5309] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5301] <... ioctl resumed>) = 0 [pid 5309] memfd_create("syzkaller", 0 [pid 5300] <... ioctl resumed>) = 0 [pid 5309] <... memfd_create resumed>) = 5 [pid 5301] close(3 [pid 5300] close(3 [pid 5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5301] <... close resumed>) = 0 [pid 5300] <... close resumed>) = 0 [pid 5309] <... mmap resumed>) = 0x7f376bc00000 [pid 5301] close(4 [pid 5300] close(4 [pid 5301] <... close resumed>) = 0 [pid 5300] <... close resumed>) = 0 [pid 5300] mkdir("./bus", 0777 [pid 5293] <... fsconfig resumed>) = 0 [pid 5301] mkdir("./bus", 0777) = 0 [pid 5293] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5301] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5300] <... mkdir resumed>) = 0 [pid 5293] <... futex resumed>) = 0 [ 69.345586][ T5299] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.356579][ T5300] loop4: detected capacity change from 0 to 40427 [ 69.374324][ T5299] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.385928][ T5297] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 5300] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5293] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5297] <... mount resumed>) = 0 [pid 5297] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5297] chdir("./bus" [pid 5309] <... write resumed>) = 2097152 [pid 5297] <... chdir resumed>) = 0 [pid 5309] munmap(0x7f376bc00000, 138412032 [ 69.414262][ T5297] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.418009][ T5301] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 69.422331][ T5300] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 69.445529][ T5301] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 69.448237][ T5300] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 5297] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5309] <... munmap resumed>) = 0 [pid 5297] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5297] <... futex resumed>) = 1 [pid 5297] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5309] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5294] <... futex resumed>) = 0 [pid 5309] close(5 [pid 5294] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... futex resumed>) = 0 [pid 5294] <... futex resumed>) = 1 [pid 5297] mkdir("./bus", 000 [pid 5294] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] <... mkdir resumed>) = 0 [pid 5297] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5297] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] <... futex resumed>) = 0 [pid 5294] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = 0 [pid 5297] fspick(AT_FDCWD, ".", 0 [pid 5294] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] <... fspick resumed>) = 4 [pid 5297] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5297] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... futex resumed>) = 0 [pid 5294] <... futex resumed>) = 1 [pid 5297] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5294] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] <... fsconfig resumed>) = 0 [pid 5297] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5297] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... futex resumed>) = 0 [pid 5294] <... futex resumed>) = 1 [pid 5297] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 69.475049][ T5299] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.493210][ T5301] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.506968][ T5300] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 5294] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... close resumed>) = 0 [pid 5294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5294] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5294] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5309] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] <... mprotect resumed>) = 0 [pid 5309] <... futex resumed>) = 1 [pid 5294] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5292] <... futex resumed>) = 0 [pid 5294] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5292] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5292] <... futex resumed>) = 1 [pid 5292] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] <... clone3 resumed> => {parent_tid=[5320]}, 88) = 5320 [pid 5294] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5320 attached NULL, 8) = 0 [pid 5294] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5320] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5320] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5320] memfd_create("syzkaller", 0) = 5 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5293] <... futex resumed>) = 0 [pid 5293] symlink("./file1", "./bus" [pid 5320] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5293] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5293] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] exit_group(0 [pid 5293] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... exit_group resumed>) = ? [ 69.588365][ T5293] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 69.626704][ T5301] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [pid 5309] <... futex resumed>) = ? [pid 5293] <... futex resumed>) = ? [pid 5309] +++ exited with 0 +++ [pid 5293] +++ exited with 0 +++ [pid 5292] +++ exited with 0 +++ [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=46 /* 0.46 s */} --- [pid 5215] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5215] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5320] <... write resumed>) = 2097152 [pid 5320] munmap(0x7f376bc00000, 138412032 [pid 5215] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5320] <... munmap resumed>) = 0 [pid 5301] <... mount resumed>) = 0 [pid 5299] <... mount resumed>) = 0 [pid 5320] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5301] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5320] close(5 [pid 5301] <... openat resumed>) = 3 [ 69.647899][ T5299] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.654977][ T5299] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.664132][ T5301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.685910][ T5300] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [pid 5299] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5300] <... mount resumed>) = 0 [pid 5301] chdir("./bus" [pid 5300] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5299] <... openat resumed>) = 3 [pid 5301] <... chdir resumed>) = 0 [pid 5299] chdir("./bus" [pid 5301] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5300] <... openat resumed>) = 3 [pid 5299] <... chdir resumed>) = 0 [pid 5301] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5299] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5301] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] chdir("./bus" [pid 5299] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5301] <... futex resumed>) = 1 [pid 5300] <... chdir resumed>) = 0 [pid 5299] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5301] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5299] <... futex resumed>) = 1 [pid 5298] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = 0 [pid 5301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5299] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] <... futex resumed>) = 0 [pid 5295] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] mkdir("./bus", 000 [pid 5300] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5298] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] <... fsconfig resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [pid 5299] mkdir("./bus", 000 [pid 5296] <... futex resumed>) = 0 [pid 5295] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5296] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5299] <... mkdir resumed>) = 0 [pid 5296] <... futex resumed>) = 0 [pid 5297] <... futex resumed>) = 0 [pid 5320] <... close resumed>) = 0 [pid 5301] <... mkdir resumed>) = 0 [pid 5300] mkdir("./bus", 000 [pid 5299] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5297] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5299] <... futex resumed>) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5298] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5298] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5301] fspick(AT_FDCWD, ".", 0 [pid 5300] <... mkdir resumed>) = 0 [pid 5299] fspick(AT_FDCWD, ".", 0 [pid 5301] <... fspick resumed>) = 4 [pid 5301] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5301] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] <... futex resumed>) = 0 [pid 5299] <... fspick resumed>) = 4 [pid 5300] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... futex resumed>) = 1 [pid 5301] <... futex resumed>) = 0 [pid 5299] <... futex resumed>) = 1 [pid 5296] <... futex resumed>) = 0 [pid 5298] <... futex resumed>) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5320] <... futex resumed>) = 1 [pid 5301] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5300] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5296] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] <... futex resumed>) = 0 [pid 5320] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] <... fsconfig resumed>) = 0 [pid 5300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5296] <... futex resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [ 69.694345][ T5300] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5294] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] fspick(AT_FDCWD, ".", 0 [pid 5299] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5295] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] <... fspick resumed>) = 4 [pid 5299] <... fsconfig resumed>) = 0 [pid 5301] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5299] <... futex resumed>) = 1 [pid 5296] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5298] <... futex resumed>) = 0 [pid 5297] <... futex resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5294] <... futex resumed>) = 1 [pid 5301] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5300] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5298] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] symlink("./file1", "./bus" [pid 5295] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5296] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5296] <... futex resumed>) = 1 [pid 5296] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5298] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] <... futex resumed>) = 0 [pid 5299] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5300] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5300] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5296] <... futex resumed>) = 0 [pid 5296] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5296] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5297] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5297] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5297] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] exit_group(0 [pid 5297] <... futex resumed>) = ? [pid 5320] <... futex resumed>) = ? [pid 5294] <... exit_group resumed>) = ? [pid 5297] +++ exited with 0 +++ [pid 5320] +++ exited with 0 +++ [pid 5294] +++ exited with 0 +++ [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} --- [ 69.743154][ T5297] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5216] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5298] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5295] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5216] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5298] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5298] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... openat resumed>) = 3 [pid 5298] <... futex resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5216] newfstatat(3, "", [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(3, [pid 5296] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5295] <... mmap resumed>) = 0x7f3774013000 [pid 5298] <... mmap resumed>) = 0x7f3774013000 [pid 5295] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5296] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... mprotect resumed>) = 0 [pid 5216] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5296] <... futex resumed>) = 0 [pid 5296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5298] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5295] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5296] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5295] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5298] <... mprotect resumed>) = 0 [pid 5296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5298] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5298] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5325 attached [pid 5296] <... clone3 resumed> => {parent_tid=[5326]}, 88) = 5326 [pid 5298] <... clone3 resumed> => {parent_tid=[5325]}, 88) = 5325 [pid 5325] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5295] <... clone3 resumed> => {parent_tid=[5324]}, 88) = 5324 [pid 5298] rt_sigprocmask(SIG_SETMASK, [], [pid 5295] rt_sigprocmask(SIG_SETMASK, [], [pid 5325] <... rseq resumed>) = 0 [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5325] set_robust_list(0x7f37740339a0, 24 [pid 5295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5298] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... set_robust_list resumed>) = 0 [pid 5296] rt_sigprocmask(SIG_SETMASK, [], [pid 5298] <... futex resumed>) = 0 [pid 5295] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] rt_sigprocmask(SIG_SETMASK, [], [pid 5298] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5295] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5326 attached [pid 5325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5295] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5215] <... umount2 resumed>) = 0 [pid 5296] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5324 attached [pid 5326] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5325] memfd_create("syzkaller", 0 [pid 5296] <... futex resumed>) = 0 [pid 5296] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5215] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5324] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5215] <... openat resumed>) = 4 [pid 5326] <... rseq resumed>) = 0 [pid 5324] <... rseq resumed>) = 0 [pid 5215] newfstatat(4, "", [pid 5326] set_robust_list(0x7f37740339a0, 24 [pid 5324] set_robust_list(0x7f37740339a0, 24 [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5326] <... set_robust_list resumed>) = 0 [pid 5324] <... set_robust_list resumed>) = 0 [pid 5215] getdents64(4, [pid 5326] rt_sigprocmask(SIG_SETMASK, [], [pid 5324] rt_sigprocmask(SIG_SETMASK, [], [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5215] getdents64(4, [pid 5326] memfd_create("syzkaller", 0 [pid 5324] memfd_create("syzkaller", 0 [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5326] <... memfd_create resumed>) = 5 [pid 5324] <... memfd_create resumed>) = 5 [pid 5215] close(4 [pid 5325] <... memfd_create resumed>) = 5 [pid 5325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5215] <... close resumed>) = 0 [pid 5215] rmdir("./2/bus" [pid 5325] <... mmap resumed>) = 0x7f376bc00000 [pid 5324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5215] <... rmdir resumed>) = 0 [pid 5324] <... mmap resumed>) = 0x7f376bc00000 [pid 5326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5215] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5326] <... mmap resumed>) = 0x7f376bc00000 [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5325] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5215] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] unlink("./2/binderfs") = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5215] close(3) = 0 [pid 5215] rmdir("./2") = 0 [pid 5215] mkdir("./3", 0777) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [pid 5215] close(3 [pid 5299] <... fsconfig resumed>) = 0 [pid 5324] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5299] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5325] <... write resumed>) = 2097152 [pid 5300] <... fsconfig resumed>) = 0 [pid 5299] <... futex resumed>) = 0 [pid 5299] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] munmap(0x7f376bc00000, 138412032) = 0 [pid 5300] <... futex resumed>) = 0 [pid 5300] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5325] close(5 [pid 5324] <... write resumed>) = 2097152 [pid 5324] munmap(0x7f376bc00000, 138412032 [pid 5301] <... fsconfig resumed>) = 0 [pid 5301] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5301] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5324] <... munmap resumed>) = 0 [pid 5324] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5325] <... close resumed>) = 0 [pid 5324] close(5 [pid 5325] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] <... write resumed>) = 2097152 [pid 5326] munmap(0x7f376bc00000, 138412032) = 0 [pid 5325] <... futex resumed>) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] <... futex resumed>) = 1 [pid 5298] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5301] <... futex resumed>) = 0 [pid 5301] symlink("./file1", "./bus" [pid 5326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5324] <... close resumed>) = 0 [pid 5216] <... umount2 resumed>) = 0 [pid 5326] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5326] close(5 [pid 5324] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5324] <... futex resumed>) = 1 [pid 5326] <... close resumed>) = 0 [pid 5324] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] <... futex resumed>) = 0 [ 70.039891][ T5301] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 70.074434][ T5299] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5216] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5295] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5295] <... futex resumed>) = 1 [pid 5326] <... futex resumed>) = 1 [pid 5301] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5299] <... futex resumed>) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] symlink("./file1", "./bus" [pid 5295] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5298] <... futex resumed>) = 0 [pid 5296] <... futex resumed>) = 0 [pid 5296] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5296] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] <... futex resumed>) = 0 [pid 5216] <... openat resumed>) = 4 [pid 5300] symlink("./file1", "./bus" [pid 5298] exit_group(0) = ? [pid 5216] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5325] <... futex resumed>) = ? [pid 5301] <... futex resumed>) = ? [pid 5216] getdents64(4, [pid 5325] +++ exited with 0 +++ [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5301] +++ exited with 0 +++ [pid 5298] +++ exited with 0 +++ [pid 5216] close(4 [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5298, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=46 /* 0.46 s */} --- [pid 5216] <... close resumed>) = 0 [pid 5214] restart_syscall(<... resuming interrupted clone ...> [pid 5216] rmdir("./2/bus" [pid 5300] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5299] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5216] <... rmdir resumed>) = 0 [pid 5214] <... restart_syscall resumed>) = 0 [pid 5299] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5300] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5300] <... futex resumed>) = 1 [pid 5299] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5296] <... futex resumed>) = 0 [pid 5295] exit_group(0 [pid 5216] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5324] <... futex resumed>) = ? [pid 5300] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] <... futex resumed>) = ? [pid 5296] exit_group(0 [pid 5214] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5326] <... futex resumed>) = ? [pid 5324] +++ exited with 0 +++ [pid 5300] <... futex resumed>) = ? [pid 5299] +++ exited with 0 +++ [pid 5296] <... exit_group resumed>) = ? [pid 5295] <... exit_group resumed>) = ? [pid 5216] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] +++ exited with 0 +++ [pid 5300] +++ exited with 0 +++ [pid 5296] +++ exited with 0 +++ [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5296, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=48 /* 0.48 s */} --- [pid 5214] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5216] unlink("./2/binderfs" [pid 5295] +++ exited with 0 +++ [pid 5216] <... unlink resumed>) = 0 [pid 5214] <... openat resumed>) = 3 [pid 5218] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=43 /* 0.43 s */} --- [pid 5216] getdents64(3, [pid 5214] newfstatat(3, "", [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] restart_syscall(<... resuming interrupted clone ...> [pid 5216] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5217] <... restart_syscall resumed>) = 0 [pid 5216] close(3 [pid 5214] getdents64(3, [pid 5218] <... openat resumed>) = 3 [pid 5216] <... close resumed>) = 0 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5218] newfstatat(3, "", [pid 5216] rmdir("./2" [pid 5214] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5216] <... rmdir resumed>) = 0 [pid 5218] getdents64(3, [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] mkdir("./3", 0777 [pid 5218] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5217] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5216] <... mkdir resumed>) = 0 [ 70.086489][ T5300] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5218] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] <... openat resumed>) = 3 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5217] newfstatat(3, "", [pid 5216] <... openat resumed>) = 3 [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] ioctl(3, LOOP_CLR_FD [pid 5217] getdents64(3, [pid 5216] <... ioctl resumed>) = 0 [pid 5217] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5216] close(3 [pid 5217] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] <... close resumed>) = 0 [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5327 ./strace-static-x86_64: Process 5327 attached [pid 5327] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5327] chdir("./3") = 0 [pid 5327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5327] setpgid(0, 0) = 0 [pid 5327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5327] write(3, "1000", 4) = 4 [pid 5327] close(3) = 0 [pid 5327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5327] write(1, "executing program\n", 18executing program ) = 18 [pid 5327] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5327] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5327] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5328]}, 88) = 5328 [pid 5327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5327] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5328 attached [pid 5328] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5328] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5328] memfd_create("syzkaller", 0) = 3 [pid 5328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5218] <... umount2 resumed>) = 0 [pid 5218] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] <... umount2 resumed>) = 0 [pid 5218] newfstatat(AT_FDCWD, "./2/bus", [pid 5214] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5214] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5214] close(4) = 0 [pid 5214] rmdir("./2/bus" [pid 5218] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... rmdir resumed>) = 0 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] <... openat resumed>) = 4 [pid 5214] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5218] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] getdents64(4, [pid 5214] unlink("./2/binderfs" [pid 5218] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, [pid 5214] <... unlink resumed>) = 0 [pid 5218] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4 [pid 5214] getdents64(3, [pid 5218] <... close resumed>) = 0 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] rmdir("./2/bus" [pid 5214] close(3) = 0 [pid 5214] rmdir("./2" [pid 5218] <... rmdir resumed>) = 0 [pid 5214] <... rmdir resumed>) = 0 [pid 5218] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] mkdir("./3", 0777 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5214] <... mkdir resumed>) = 0 [pid 5218] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5218] unlink("./2/binderfs" [pid 5214] <... openat resumed>) = 3 [pid 5218] <... unlink resumed>) = 0 [pid 5214] ioctl(3, LOOP_CLR_FD) = 0 [pid 5214] close(3 [pid 5218] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3 [pid 5217] <... umount2 resumed>) = 0 [pid 5218] <... close resumed>) = 0 [pid 5218] rmdir("./2") = 0 [pid 5218] mkdir("./3", 0777 [pid 5217] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] <... mkdir resumed>) = 0 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./2/bus", [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] ioctl(3, LOOP_CLR_FD [pid 5217] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] <... ioctl resumed>) = 0 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5218] close(3 [pid 5217] <... openat resumed>) = 4 [pid 5217] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5217] close(4) = 0 [pid 5217] rmdir("./2/bus") = 0 [pid 5217] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] unlink("./2/binderfs") = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5217] close(3) = 0 [pid 5217] rmdir("./2") = 0 [pid 5217] mkdir("./3", 0777) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5217] ioctl(3, LOOP_CLR_FD) = 0 [pid 5217] close(3 [pid 5216] <... close resumed>) = 0 [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5329 attached , child_tidptr=0x55556d635690) = 5329 [pid 5329] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5329] chdir("./3") = 0 [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5329] setpgid(0, 0) = 0 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5329] write(3, "1000", 4) = 4 [pid 5329] close(3) = 0 [pid 5329] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5329] write(1, "executing program\n", 18) = 18 [pid 5329] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5329] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5329] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5330]}, 88) = 5330 ./strace-static-x86_64: Process 5330 attached [pid 5329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5330] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5329] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... rseq resumed>) = 0 [pid 5329] <... futex resumed>) = 0 [pid 5329] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5330] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5330] memfd_create("syzkaller", 0) = 3 [pid 5330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5217] <... close resumed>) = 0 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5331 ./strace-static-x86_64: Process 5331 attached [pid 5214] <... close resumed>) = 0 [pid 5331] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5331] chdir("./3") = 0 [pid 5214] <... clone resumed>, child_tidptr=0x55556d635690) = 5332 ./strace-static-x86_64: Process 5332 attached [pid 5332] set_robust_list(0x55556d6356a0, 24 [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5332] <... set_robust_list resumed>) = 0 [pid 5332] chdir("./3") = 0 [pid 5332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5332] setpgid(0, 0) = 0 [pid 5332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5332] write(3, "1000", 4) = 4 [pid 5332] close(3) = 0 [pid 5332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5332] write(1, "executing program\n", 18) = 18 [pid 5331] <... prctl resumed>) = 0 [pid 5332] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] setpgid(0, 0 [pid 5332] <... futex resumed>) = 0 [pid 5331] <... setpgid resumed>) = 0 [pid 5332] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5331] <... openat resumed>) = 3 [pid 5332] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5331] write(3, "1000", 4 [pid 5332] <... mprotect resumed>) = 0 [pid 5331] <... write resumed>) = 4 [pid 5332] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5331] close(3 [pid 5332] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5331] <... close resumed>) = 0 [pid 5332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5331] symlink("/dev/binderfs", "./binderfs" [pid 5332] <... clone3 resumed> => {parent_tid=[5333]}, 88) = 5333 [pid 5331] <... symlink resumed>) = 0 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], [pid 5331] write(1, "executing program\n", 18) = 18 [pid 5331] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, ./strace-static-x86_64: Process 5333 attached NULL, 8) = 0 [pid 5333] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5332] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5333] <... rseq resumed>) = 0 [pid 5333] set_robust_list(0x7f37740549a0, 24executing program executing program [pid 5331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5333] <... set_robust_list resumed>) = 0 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], [pid 5331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] <... close resumed>) = 0 [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5331] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5333] memfd_create("syzkaller", 0) = 3 [pid 5331] <... mprotect resumed>) = 0 [pid 5333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5331] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5333] <... mmap resumed>) = 0x7f376bc00000 [pid 5331] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5334]}, 88) = 5334 ./strace-static-x86_64: Process 5334 attached [pid 5331] rt_sigprocmask(SIG_SETMASK, [], [pid 5334] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5334] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5334] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 5331] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5335 ./strace-static-x86_64: Process 5335 attached [pid 5335] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5335] chdir("./3") = 0 [pid 5335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5335] setpgid(0, 0) = 0 [pid 5335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5335] write(3, "1000", 4) = 4 [pid 5335] close(3) = 0 [pid 5335] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5335] write(1, "executing program\n", 18) = 18 [pid 5335] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5335] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5335] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5334] <... futex resumed>) = 0 [pid 5331] <... futex resumed>) = 1 [pid 5335] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5334] memfd_create("syzkaller", 0 [pid 5331] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5335] <... mprotect resumed>) = 0 [pid 5334] <... memfd_create resumed>) = 3 [pid 5335] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5335] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5336 attached => {parent_tid=[5336]}, 88) = 5336 [pid 5336] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5335] rt_sigprocmask(SIG_SETMASK, [], [pid 5336] <... rseq resumed>) = 0 [pid 5335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5336] set_robust_list(0x7f37740549a0, 24 [pid 5335] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] <... set_robust_list resumed>) = 0 [pid 5335] <... futex resumed>) = 0 [pid 5336] rt_sigprocmask(SIG_SETMASK, [], [pid 5335] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5336] memfd_create("syzkaller", 0) = 3 [pid 5336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5328] <... write resumed>) = 20699119 [pid 5328] munmap(0x7f376bc00000, 138412032) = 0 [pid 5334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5328] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5328] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5328] close(3) = 0 [pid 5328] close(4) = 0 [pid 5328] mkdir("./bus", 0777) = 0 [ 71.122590][ T5328] loop1: detected capacity change from 0 to 40427 [ 71.158311][ T5328] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [pid 5328] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [ 71.166089][ T5328] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 71.247227][ T5328] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5330] <... write resumed>) = 20699119 [pid 5330] munmap(0x7f376bc00000, 138412032) = 0 [pid 5330] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5330] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5330] close(3) = 0 [pid 5330] close(4) = 0 [pid 5330] mkdir("./bus", 0777) = 0 [ 71.386628][ T5330] loop2: detected capacity change from 0 to 40427 [ 71.415534][ T5330] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 71.435587][ T5330] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.437921][ T5328] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [pid 5330] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5328] <... mount resumed>) = 0 [pid 5328] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5328] chdir("./bus") = 0 [pid 5328] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5328] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5327] <... futex resumed>) = 0 [pid 5328] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5327] <... futex resumed>) = 0 [pid 5328] mkdir("./bus", 000 [pid 5327] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] <... mkdir resumed>) = 0 [pid 5328] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5327] <... futex resumed>) = 0 [pid 5328] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5327] <... futex resumed>) = 0 [pid 5328] fspick(AT_FDCWD, ".", 0 [pid 5327] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] <... fspick resumed>) = 4 [pid 5328] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5327] <... futex resumed>) = 0 [pid 5328] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5327] <... futex resumed>) = 0 [pid 5328] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5327] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] <... fsconfig resumed>) = 0 [pid 5328] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5327] <... futex resumed>) = 0 [pid 5328] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5327] <... futex resumed>) = 0 [pid 5328] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 71.477997][ T5328] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 71.507331][ T5330] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 5327] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5327] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5327] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5344 attached [pid 5344] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5327] <... clone3 resumed> => {parent_tid=[5344]}, 88) = 5344 [pid 5344] <... rseq resumed>) = 0 [pid 5327] rt_sigprocmask(SIG_SETMASK, [], [pid 5344] set_robust_list(0x7f37740339a0, 24 [pid 5327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5344] <... set_robust_list resumed>) = 0 [pid 5327] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] rt_sigprocmask(SIG_SETMASK, [], [pid 5327] <... futex resumed>) = 0 [pid 5344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5327] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5344] memfd_create("syzkaller", 0) = 5 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5333] <... write resumed>) = 20699119 [pid 5344] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5333] munmap(0x7f376bc00000, 138412032) = 0 [pid 5336] <... write resumed>) = 20699119 [pid 5330] <... mount resumed>) = 0 [pid 5336] munmap(0x7f376bc00000, 138412032 [pid 5330] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 71.632040][ T5330] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 71.649403][ T5330] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 5334] <... write resumed>) = 20699119 [pid 5344] <... write resumed>) = 2097152 [pid 5336] <... munmap resumed>) = 0 [pid 5333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5330] chdir("./bus" [pid 5328] <... fsconfig resumed>) = 0 [pid 5333] <... openat resumed>) = 4 [pid 5333] ioctl(4, LOOP_SET_FD, 3 [pid 5330] <... chdir resumed>) = 0 [pid 5328] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] munmap(0x7f376bc00000, 138412032 [pid 5336] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5344] munmap(0x7f376bc00000, 138412032) = 0 [pid 5336] <... openat resumed>) = 4 [pid 5334] <... munmap resumed>) = 0 [pid 5333] <... ioctl resumed>) = 0 [pid 5330] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5328] <... futex resumed>) = 0 [pid 5336] ioctl(4, LOOP_SET_FD, 3 [pid 5330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5344] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5334] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5333] close(3 [pid 5330] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5344] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5333] <... close resumed>) = 0 [pid 5334] <... openat resumed>) = 4 [pid 5333] close(4 [pid 5344] close(5 [pid 5336] <... ioctl resumed>) = 0 [pid 5334] ioctl(4, LOOP_SET_FD, 3 [pid 5333] <... close resumed>) = 0 [pid 5330] <... futex resumed>) = 1 [pid 5329] <... futex resumed>) = 0 [pid 5344] <... close resumed>) = 0 [pid 5336] close(3 [pid 5330] mkdir("./bus", 000 [pid 5329] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] mkdir("./bus", 0777 [pid 5329] <... futex resumed>) = 0 [pid 5329] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] <... close resumed>) = 0 [pid 5330] <... mkdir resumed>) = 0 [pid 5336] close(4 [pid 5330] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] <... close resumed>) = 0 [pid 5330] <... futex resumed>) = 1 [pid 5329] <... futex resumed>) = 0 [ 71.697634][ T5333] loop0: detected capacity change from 0 to 40427 [ 71.710662][ T5336] loop4: detected capacity change from 0 to 40427 [ 71.735695][ T5334] loop3: detected capacity change from 0 to 40427 [pid 5336] mkdir("./bus", 0777 [pid 5333] <... mkdir resumed>) = 0 [pid 5330] fspick(AT_FDCWD, ".", 0 [pid 5329] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5336] <... mkdir resumed>) = 0 [pid 5330] <... fspick resumed>) = 4 [pid 5329] <... futex resumed>) = 0 [pid 5336] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5329] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5329] <... futex resumed>) = 0 [pid 5330] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5329] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... fsconfig resumed>) = 0 [pid 5329] <... futex resumed>) = 0 [pid 5334] <... ioctl resumed>) = 0 [pid 5330] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] close(3 [pid 5330] <... futex resumed>) = 0 [pid 5329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5334] <... close resumed>) = 0 [pid 5330] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5329] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] close(4 [pid 5329] <... futex resumed>) = 0 [pid 5334] <... close resumed>) = 0 [pid 5329] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] mkdir("./bus", 0777 [pid 5344] <... futex resumed>) = 1 [pid 5334] <... mkdir resumed>) = 0 [pid 5344] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5334] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5327] <... futex resumed>) = 0 [ 71.752621][ T5336] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 71.762822][ T5333] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.772880][ T5334] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 71.782843][ T5334] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 5327] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... futex resumed>) = 0 [pid 5327] <... futex resumed>) = 1 [pid 5328] symlink("./file1", "./bus" [pid 5327] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5329] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5329] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5346]}, 88) = 5346 [pid 5329] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5346 attached NULL, 8) = 0 [pid 5346] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5329] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] <... rseq resumed>) = 0 [pid 5329] <... futex resumed>) = 0 [pid 5346] set_robust_list(0x7f37740339a0, 24 [pid 5329] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5346] <... set_robust_list resumed>) = 0 [pid 5346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5346] memfd_create("syzkaller", 0) = 5 [pid 5346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5328] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5328] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5327] <... futex resumed>) = 0 [pid 5328] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] exit_group(0 [pid 5344] <... futex resumed>) = ? [pid 5328] <... futex resumed>) = ? [pid 5327] <... exit_group resumed>) = ? [pid 5344] +++ exited with 0 +++ [ 71.795209][ T5336] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 71.807968][ T5328] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 71.822450][ T5333] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 5346] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5328] +++ exited with 0 +++ [pid 5327] +++ exited with 0 +++ [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5327, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=38 /* 0.38 s */} --- [pid 5215] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5215] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [ 71.854846][ T5334] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.890048][ T5333] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 5215] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5346] <... write resumed>) = 2097152 [pid 5346] munmap(0x7f376bc00000, 138412032) = 0 [pid 5330] <... fsconfig resumed>) = 0 [pid 5346] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5346] close(5 [pid 5330] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.918070][ T5336] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 5330] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] <... close resumed>) = 0 [pid 5346] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5329] <... futex resumed>) = 0 [pid 5346] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5329] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... futex resumed>) = 0 [pid 5329] <... futex resumed>) = 1 [pid 5330] symlink("./file1", "./bus" [pid 5329] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5330] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5329] <... futex resumed>) = 0 [pid 5330] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5329] exit_group(0 [pid 5346] <... futex resumed>) = ? [pid 5330] <... futex resumed>) = ? [pid 5329] <... exit_group resumed>) = ? [pid 5346] +++ exited with 0 +++ [pid 5330] +++ exited with 0 +++ [pid 5329] +++ exited with 0 +++ [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=41 /* 0.41 s */} --- [pid 5216] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5216] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5216] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [ 71.985713][ T5330] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5216] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] <... umount2 resumed>) = 0 [pid 5215] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5333] <... mount resumed>) = 0 [ 72.056550][ T5333] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 72.064618][ T5334] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.075276][ T5333] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.085298][ T5336] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 72.085995][ T5334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 5215] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5334] <... mount resumed>) = 0 [pid 5336] <... mount resumed>) = 0 [pid 5333] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5336] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5333] <... openat resumed>) = 3 [pid 5215] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5333] chdir("./bus" [pid 5215] <... openat resumed>) = 4 [pid 5333] <... chdir resumed>) = 0 [pid 5215] newfstatat(4, "", [pid 5333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5333] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5215] getdents64(4, [pid 5333] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5333] <... futex resumed>) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5333] mkdir("./bus", 000 [pid 5332] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] getdents64(4, [pid 5334] <... openat resumed>) = 3 [pid 5332] <... futex resumed>) = 0 [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5332] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] close(4) = 0 [pid 5215] rmdir("./3/bus") = 0 [pid 5334] chdir("./bus" [pid 5215] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5334] <... chdir resumed>) = 0 [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5336] <... openat resumed>) = 3 [pid 5215] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5336] chdir("./bus" [pid 5215] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5336] <... chdir resumed>) = 0 [pid 5215] unlink("./3/binderfs" [pid 5336] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5215] <... unlink resumed>) = 0 [pid 5336] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5215] getdents64(3, [pid 5336] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5336] <... futex resumed>) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5215] close(3 [pid 5336] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... close resumed>) = 0 [pid 5336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5335] <... futex resumed>) = 0 [pid 5215] rmdir("./3" [pid 5336] mkdir("./bus", 000 [pid 5335] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... rmdir resumed>) = 0 [pid 5334] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5333] <... mkdir resumed>) = 0 [pid 5215] mkdir("./4", 0777 [pid 5333] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5215] <... mkdir resumed>) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5333] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5332] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5332] <... futex resumed>) = 0 [pid 5215] <... openat resumed>) = 3 [pid 5333] fspick(AT_FDCWD, ".", 0 [pid 5332] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] <... fspick resumed>) = 4 [pid 5333] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] ioctl(3, LOOP_CLR_FD [pid 5333] <... futex resumed>) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5215] <... ioctl resumed>) = 0 [pid 5333] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5332] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5332] <... futex resumed>) = 0 [ 72.097921][ T5336] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5215] close(3 [pid 5334] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5332] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] <... mkdir resumed>) = 0 [pid 5334] <... futex resumed>) = 1 [pid 5333] <... fsconfig resumed>) = 0 [pid 5331] <... futex resumed>) = 0 [pid 5334] mkdir("./bus", 000 [pid 5333] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... futex resumed>) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5336] <... futex resumed>) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5333] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5332] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = 0 [pid 5336] fspick(AT_FDCWD, ".", 0 [pid 5335] <... futex resumed>) = 0 [pid 5332] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] <... fspick resumed>) = 4 [pid 5335] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5336] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5335] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] <... fsconfig resumed>) = 0 [pid 5335] <... futex resumed>) = 0 [pid 5336] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] <... futex resumed>) = 0 [pid 5335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5336] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5335] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5335] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] <... mkdir resumed>) = 0 [pid 5331] <... futex resumed>) = 0 [pid 5216] <... umount2 resumed>) = 0 [pid 5331] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5334] <... futex resumed>) = 1 [pid 5331] <... futex resumed>) = 0 [pid 5334] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5331] <... futex resumed>) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5334] fspick(AT_FDCWD, ".", 0 [pid 5331] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] newfstatat(AT_FDCWD, "./3/bus", [pid 5334] <... fspick resumed>) = 4 [pid 5334] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5334] <... futex resumed>) = 1 [pid 5331] <... futex resumed>) = 0 [pid 5216] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5334] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5331] <... futex resumed>) = 0 [pid 5334] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5331] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] <... fsconfig resumed>) = 0 [pid 5216] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5334] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5331] <... futex resumed>) = 0 [pid 5216] <... openat resumed>) = 4 [pid 5331] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5331] <... futex resumed>) = 0 [pid 5216] newfstatat(4, "", [pid 5331] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5332] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5332] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5359]}, 88) = 5359 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5335] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5332] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5332] <... futex resumed>) = 0 [pid 5332] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5335] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] getdents64(4, ./strace-static-x86_64: Process 5359 attached [pid 5359] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5335] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... rseq resumed>) = 0 [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5359] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5335] <... futex resumed>) = 0 [pid 5359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5359] memfd_create("syzkaller", 0 [pid 5335] <... mmap resumed>) = 0x7f3774013000 [pid 5335] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5359] <... memfd_create resumed>) = 5 [pid 5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5335] <... mprotect resumed>) = 0 [pid 5216] getdents64(4, [pid 5359] <... mmap resumed>) = 0x7f376bc00000 [pid 5335] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5335] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5360]}, 88) = 5360 [pid 5335] rt_sigprocmask(SIG_SETMASK, [], [pid 5216] close(4) = 0 ./strace-static-x86_64: Process 5360 attached [pid 5335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5360] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5335] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... rseq resumed>) = 0 [pid 5335] <... futex resumed>) = 0 [pid 5360] set_robust_list(0x7f37740339a0, 24 [pid 5335] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5360] <... set_robust_list resumed>) = 0 [pid 5360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5360] memfd_create("syzkaller", 0) = 5 [pid 5360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5216] rmdir("./3/bus" [pid 5331] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] <... rmdir resumed>) = 0 [pid 5331] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5359] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5331] <... futex resumed>) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5216] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5331] <... mmap resumed>) = 0x7f3774013000 [pid 5360] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5331] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5216] unlink("./3/binderfs") = 0 [pid 5331] <... mprotect resumed>) = 0 [pid 5216] getdents64(3, [pid 5331] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5216] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5331] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5216] close(3 [pid 5331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5216] <... close resumed>) = 0 [pid 5331] <... clone3 resumed> => {parent_tid=[5361]}, 88) = 5361 [pid 5331] rt_sigprocmask(SIG_SETMASK, [], [pid 5216] rmdir("./3"./strace-static-x86_64: Process 5361 attached [pid 5361] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5216] <... rmdir resumed>) = 0 [pid 5331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5361] set_robust_list(0x7f37740339a0, 24 [pid 5331] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] mkdir("./4", 0777 [pid 5361] <... set_robust_list resumed>) = 0 [pid 5361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5361] memfd_create("syzkaller", 0) = 5 [pid 5361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5331] <... futex resumed>) = 0 [pid 5216] <... mkdir resumed>) = 0 [pid 5331] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5216] ioctl(3, LOOP_CLR_FD) = 0 [pid 5216] close(3 [pid 5360] <... write resumed>) = 2097152 [pid 5359] <... write resumed>) = 2097152 [pid 5361] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5359] munmap(0x7f376bc00000, 138412032 [pid 5333] <... fsconfig resumed>) = 0 [pid 5360] munmap(0x7f376bc00000, 138412032) = 0 [pid 5359] <... munmap resumed>) = 0 [pid 5336] <... fsconfig resumed>) = 0 [pid 5333] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... futex resumed>) = 0 [pid 5333] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5336] <... futex resumed>) = 0 [pid 5360] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5359] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5336] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5360] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5360] close(5 [pid 5359] close(5 [pid 5360] <... close resumed>) = 0 [pid 5359] <... close resumed>) = 0 [pid 5359] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5334] <... fsconfig resumed>) = 0 [pid 5332] <... futex resumed>) = 0 [pid 5334] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5332] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5333] <... futex resumed>) = 0 [pid 5332] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] symlink("./file1", "./bus" [pid 5360] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5335] <... futex resumed>) = 0 [pid 5335] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5335] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5360] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5361] <... write resumed>) = 2097152 [pid 5336] <... futex resumed>) = 0 [pid 5333] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5361] munmap(0x7f376bc00000, 138412032 [pid 5336] symlink("./file1", "./bus" [pid 5361] <... munmap resumed>) = 0 [pid 5333] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5361] close(5 [pid 5333] <... futex resumed>) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5332] exit_group(0 [pid 5333] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5361] <... close resumed>) = 0 [pid 5359] <... futex resumed>) = ? [pid 5336] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5333] <... futex resumed>) = ? [pid 5332] <... exit_group resumed>) = ? [pid 5359] +++ exited with 0 +++ [pid 5336] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] +++ exited with 0 +++ [pid 5332] +++ exited with 0 +++ [pid 5336] <... futex resumed>) = 1 [pid 5336] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5332, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 5214] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5214] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5214] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5335] <... futex resumed>) = 0 [pid 5214] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5335] exit_group(0 [pid 5336] <... futex resumed>) = ? [pid 5335] <... exit_group resumed>) = ? [pid 5336] +++ exited with 0 +++ [pid 5360] <... futex resumed>) = ? [pid 5360] +++ exited with 0 +++ [pid 5335] +++ exited with 0 +++ [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5335, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=46 /* 0.46 s */} --- [ 72.428587][ T5333] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 72.458087][ T5336] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5218] restart_syscall(<... resuming interrupted clone ...> [pid 5361] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... restart_syscall resumed>) = 0 [pid 5218] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5361] <... futex resumed>) = 1 [pid 5218] <... openat resumed>) = 3 [pid 5361] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5218] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5331] <... futex resumed>) = 0 [pid 5331] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = 0 [pid 5331] <... futex resumed>) = 1 [pid 5334] symlink("./file1", "./bus" [pid 5331] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5334] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5331] <... futex resumed>) = 0 [pid 5334] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] exit_group(0 [pid 5334] <... futex resumed>) = ? [pid 5331] <... exit_group resumed>) = ? [pid 5361] <... futex resumed>) = ? [pid 5361] +++ exited with 0 +++ [pid 5334] +++ exited with 0 +++ [pid 5331] +++ exited with 0 +++ [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=46 /* 0.46 s */} --- [pid 5215] <... close resumed>) = 0 [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5217] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] <... clone resumed>, child_tidptr=0x55556d635690) = 5362 [pid 5217] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5217] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 5362 attached [pid 5217] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5362] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5362] chdir("./4") = 0 [pid 5362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5362] setpgid(0, 0) = 0 [pid 5362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5362] write(3, "1000", 4) = 4 [pid 5362] close(3) = 0 [ 72.522225][ T5334] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5362] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5362] write(1, "executing program\n", 18) = 18 [pid 5362] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5362] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5363]}, 88) = 5363 [pid 5362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5362] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5363 attached [pid 5363] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5363] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5363] memfd_create("syzkaller", 0) = 3 [pid 5363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5216] <... close resumed>) = 0 [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5364 attached , child_tidptr=0x55556d635690) = 5364 [pid 5364] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5364] chdir("./4") = 0 [pid 5364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5364] setpgid(0, 0) = 0 [pid 5364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5364] write(3, "1000", 4) = 4 [pid 5364] close(3) = 0 [pid 5364] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5364] write(1, "executing program\n", 18) = 18 [pid 5364] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5364] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5364] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5365]}, 88) = 5365 [pid 5364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5365 attached [pid 5364] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5364] <... futex resumed>) = 0 [pid 5365] <... rseq resumed>) = 0 [pid 5364] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5365] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5365] memfd_create("syzkaller", 0) = 3 [pid 5365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5214] <... umount2 resumed>) = 0 [pid 5214] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5214] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5214] close(4) = 0 [pid 5214] rmdir("./3/bus") = 0 [pid 5214] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] unlink("./3/binderfs") = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5214] close(3) = 0 [pid 5214] rmdir("./3") = 0 [pid 5218] <... umount2 resumed>) = 0 [pid 5214] mkdir("./4", 0777) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5214] ioctl(3, LOOP_CLR_FD) = 0 [pid 5214] close(3 [pid 5218] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5218] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./3/bus") = 0 [pid 5217] <... umount2 resumed>) = 0 [pid 5218] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] unlink("./3/binderfs" [pid 5217] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] <... unlink resumed>) = 0 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] getdents64(3, [pid 5217] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3 [pid 5217] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] <... close resumed>) = 0 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] rmdir("./3" [pid 5217] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5218] <... rmdir resumed>) = 0 [pid 5217] <... openat resumed>) = 4 [pid 5217] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(4, [pid 5218] mkdir("./4", 0777 [pid 5217] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] <... mkdir resumed>) = 0 [pid 5217] close(4 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5217] <... close resumed>) = 0 [pid 5218] <... openat resumed>) = 3 [pid 5217] rmdir("./3/bus" [pid 5218] ioctl(3, LOOP_CLR_FD [pid 5217] <... rmdir resumed>) = 0 [pid 5218] <... ioctl resumed>) = 0 [pid 5217] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] close(3 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] unlink("./3/binderfs") = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5217] close(3) = 0 [pid 5217] rmdir("./3") = 0 [pid 5217] mkdir("./4", 0777) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5217] ioctl(3, LOOP_CLR_FD) = 0 [pid 5217] close(3 [pid 5365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5214] <... close resumed>) = 0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5366 ./strace-static-x86_64: Process 5366 attached [pid 5366] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5366] chdir("./4") = 0 [pid 5366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5366] setpgid(0, 0) = 0 [pid 5366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5366] write(3, "1000", 4) = 4 [pid 5366] close(3) = 0 [pid 5366] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5366] write(1, "executing program\n", 18) = 18 [pid 5366] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5366] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5366] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5366] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5366] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5367 attached [pid 5367] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5366] <... clone3 resumed> => {parent_tid=[5367]}, 88) = 5367 [pid 5367] <... rseq resumed>) = 0 [pid 5366] rt_sigprocmask(SIG_SETMASK, [], [pid 5367] set_robust_list(0x7f37740549a0, 24 [pid 5366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5367] <... set_robust_list resumed>) = 0 [pid 5366] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] rt_sigprocmask(SIG_SETMASK, [], [pid 5366] <... futex resumed>) = 0 [pid 5367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5366] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5367] memfd_create("syzkaller", 0) = 3 [pid 5367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5218] <... close resumed>) = 0 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5368 ./strace-static-x86_64: Process 5368 attached [pid 5368] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5368] chdir("./4") = 0 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5368] setpgid(0, 0) = 0 [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5368] write(3, "1000", 4) = 4 [pid 5368] close(3) = 0 [pid 5368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] write(1, "executing program\n", 18executing program ) = 18 [pid 5368] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5368] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5217] <... close resumed>) = 0 [pid 5368] <... mprotect resumed>) = 0 [pid 5368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5369]}, 88) = 5369 [pid 5368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5368] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5369 attached [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5369] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5368] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5369] <... rseq resumed>) = 0 [pid 5369] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5369] memfd_create("syzkaller", 0) = 3 [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5370 [pid 5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5370 attached ) = 0x7f376bc00000 [pid 5370] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5370] chdir("./4") = 0 [pid 5370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5370] setpgid(0, 0) = 0 [pid 5370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5370] write(3, "1000", 4) = 4 [pid 5370] close(3) = 0 [pid 5370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5370] write(1, "executing program\n", 18executing program ) = 18 [pid 5370] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5370] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5370] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5371 attached => {parent_tid=[5371]}, 88) = 5371 [pid 5371] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5370] rt_sigprocmask(SIG_SETMASK, [], [pid 5371] <... rseq resumed>) = 0 [pid 5370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5371] set_robust_list(0x7f37740549a0, 24 [pid 5370] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] <... set_robust_list resumed>) = 0 [pid 5370] <... futex resumed>) = 0 [pid 5371] rt_sigprocmask(SIG_SETMASK, [], [pid 5370] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5371] memfd_create("syzkaller", 0) = 3 [pid 5371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5363] <... write resumed>) = 20699119 [pid 5363] munmap(0x7f376bc00000, 138412032) = 0 [pid 5363] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5363] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5363] close(3) = 0 [pid 5363] close(4) = 0 [pid 5363] mkdir("./bus", 0777) = 0 [ 73.433957][ T5363] loop1: detected capacity change from 0 to 40427 [ 73.463503][ T5363] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [pid 5363] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5365] <... write resumed>) = 20699119 [ 73.484432][ T5363] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 5365] munmap(0x7f376bc00000, 138412032) = 0 [pid 5365] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5365] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5365] close(3) = 0 [pid 5365] close(4 [pid 5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5365] <... close resumed>) = 0 [pid 5365] mkdir("./bus", 0777) = 0 [ 73.539200][ T5363] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.559856][ T5365] loop2: detected capacity change from 0 to 40427 [pid 5365] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [ 73.605402][ T5365] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 73.635542][ T5365] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 5371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5363] <... mount resumed>) = 0 [pid 5363] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5363] chdir("./bus") = 0 [pid 5363] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5363] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5362] <... futex resumed>) = 0 [pid 5363] mkdir("./bus", 000 [pid 5362] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5363] <... mkdir resumed>) = 0 [pid 5363] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5362] <... futex resumed>) = 0 [pid 5363] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5362] <... futex resumed>) = 0 [pid 5362] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5363] fspick(AT_FDCWD, ".", 0) = 4 [pid 5363] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5362] <... futex resumed>) = 0 [pid 5363] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5362] <... futex resumed>) = 0 [pid 5363] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5362] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5363] <... fsconfig resumed>) = 0 [pid 5363] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5362] <... futex resumed>) = 0 [ 73.678289][ T5363] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 73.698512][ T5363] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.710040][ T5365] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 5363] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5362] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5362] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5362] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5379 attached [pid 5379] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5362] <... clone3 resumed> => {parent_tid=[5379]}, 88) = 5379 [pid 5379] <... rseq resumed>) = 0 [pid 5362] rt_sigprocmask(SIG_SETMASK, [], [pid 5379] set_robust_list(0x7f37740339a0, 24 [pid 5362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5379] <... set_robust_list resumed>) = 0 [pid 5362] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] rt_sigprocmask(SIG_SETMASK, [], [pid 5362] <... futex resumed>) = 0 [pid 5379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5379] memfd_create("syzkaller", 0) = 5 [pid 5379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5379] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5365] <... mount resumed>) = 0 [pid 5365] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5363] <... fsconfig resumed>) = 0 [pid 5365] <... openat resumed>) = 3 [pid 5365] chdir("./bus") = 0 [pid 5365] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5365] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5365] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5364] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5363] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 73.853282][ T5365] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 73.877967][ T5365] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 5363] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5365] mkdir("./bus", 000) = 0 [pid 5365] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5365] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5379] <... write resumed>) = 2097152 [pid 5364] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] munmap(0x7f376bc00000, 138412032) = 0 [pid 5365] <... futex resumed>) = 0 [pid 5364] <... futex resumed>) = 1 [pid 5365] fspick(AT_FDCWD, ".", 0 [pid 5364] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5365] <... fspick resumed>) = 4 [pid 5365] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5379] close(5 [pid 5365] <... futex resumed>) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5365] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5364] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] <... fsconfig resumed>) = 0 [pid 5364] <... futex resumed>) = 0 [pid 5364] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5365] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5365] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5364] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] <... close resumed>) = 0 [pid 5365] <... futex resumed>) = 0 [pid 5364] <... futex resumed>) = 1 [pid 5379] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5364] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5379] <... futex resumed>) = 1 [pid 5362] <... futex resumed>) = 0 [pid 5379] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] <... futex resumed>) = 0 [pid 5362] <... futex resumed>) = 1 [pid 5363] symlink("./file1", "./bus" [pid 5362] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5363] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5363] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5362] <... futex resumed>) = 0 [pid 5362] exit_group(0 [pid 5379] <... futex resumed>) = ? [pid 5362] <... exit_group resumed>) = ? [pid 5363] +++ exited with 0 +++ [pid 5379] +++ exited with 0 +++ [pid 5362] +++ exited with 0 +++ [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5362, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=45 /* 0.45 s */} --- [pid 5215] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5215] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5215] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5215] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5367] <... write resumed>) = 20699119 [ 73.989285][ T5363] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5367] munmap(0x7f376bc00000, 138412032 [pid 5364] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5364] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5364] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5381 attached [pid 5367] <... munmap resumed>) = 0 [pid 5364] <... clone3 resumed> => {parent_tid=[5381]}, 88) = 5381 [pid 5367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5367] <... openat resumed>) = 4 [pid 5364] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] ioctl(4, LOOP_SET_FD, 3 [pid 5364] <... futex resumed>) = 0 [pid 5381] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5364] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5381] set_robust_list(0x7f37740339a0, 24 [pid 5367] <... ioctl resumed>) = 0 [pid 5381] <... set_robust_list resumed>) = 0 [pid 5381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5381] memfd_create("syzkaller", 0) = 5 [pid 5381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5367] close(3 [pid 5371] <... write resumed>) = 20699119 [pid 5369] <... write resumed>) = 20699119 [pid 5367] <... close resumed>) = 0 [pid 5365] <... fsconfig resumed>) = 0 [pid 5369] munmap(0x7f376bc00000, 138412032 [pid 5367] close(4 [ 74.107293][ T5367] loop0: detected capacity change from 0 to 40427 [pid 5365] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... close resumed>) = 0 [pid 5371] munmap(0x7f376bc00000, 138412032 [pid 5369] <... munmap resumed>) = 0 [pid 5367] mkdir("./bus", 0777 [pid 5365] <... futex resumed>) = 0 [pid 5381] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5367] <... mkdir resumed>) = 0 [pid 5365] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5367] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5371] <... munmap resumed>) = 0 [pid 5371] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5381] <... write resumed>) = 2097152 [pid 5371] <... openat resumed>) = 4 [pid 5371] ioctl(4, LOOP_SET_FD, 3 [pid 5381] munmap(0x7f376bc00000, 138412032 [pid 5215] <... umount2 resumed>) = 0 [pid 5381] <... munmap resumed>) = 0 [pid 5381] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5381] close(5 [pid 5371] <... ioctl resumed>) = 0 [pid 5371] close(3) = 0 [pid 5371] close(4) = 0 [pid 5369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5371] mkdir("./bus", 0777) = 0 [pid 5369] <... openat resumed>) = 4 [pid 5215] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5371] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5369] ioctl(4, LOOP_SET_FD, 3 [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 74.191504][ T5367] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 74.208966][ T5371] loop3: detected capacity change from 0 to 40427 [ 74.216238][ T5367] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 5381] <... close resumed>) = 0 [pid 5369] <... ioctl resumed>) = 0 [pid 5215] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5381] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] close(3 [pid 5215] newfstatat(4, "", [pid 5381] <... futex resumed>) = 1 [pid 5369] <... close resumed>) = 0 [pid 5364] <... futex resumed>) = 0 [pid 5381] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5369] close(4 [pid 5364] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5369] <... close resumed>) = 0 [pid 5365] <... futex resumed>) = 0 [pid 5364] <... futex resumed>) = 1 [pid 5215] getdents64(4, [pid 5365] symlink("./file1", "./bus" [pid 5364] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5369] mkdir("./bus", 0777 [pid 5215] getdents64(4, [pid 5365] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5369] <... mkdir resumed>) = 0 [ 74.238442][ T5369] loop4: detected capacity change from 0 to 40427 [ 74.239145][ T5371] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 74.254734][ T5371] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 74.266768][ T5365] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 74.284427][ T5367] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 5365] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] close(4 [pid 5369] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5365] <... futex resumed>) = 1 [pid 5364] <... futex resumed>) = 0 [pid 5364] exit_group(0 [pid 5215] <... close resumed>) = 0 [pid 5364] <... exit_group resumed>) = ? [pid 5381] <... futex resumed>) = ? [pid 5215] rmdir("./4/bus" [pid 5381] +++ exited with 0 +++ [pid 5215] <... rmdir resumed>) = 0 [pid 5215] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5365] +++ exited with 0 +++ [pid 5364] +++ exited with 0 +++ [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5364, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=38 /* 0.38 s */} --- [pid 5215] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5216] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5215] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] unlink("./4/binderfs") = 0 [pid 5216] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] getdents64(3, [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5216] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5215] close(3 [pid 5216] <... openat resumed>) = 3 [pid 5215] <... close resumed>) = 0 [pid 5216] newfstatat(3, "", [pid 5215] rmdir("./4" [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(3, [pid 5215] <... rmdir resumed>) = 0 [pid 5216] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5215] mkdir("./5", 0777 [pid 5216] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] <... mkdir resumed>) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 74.297326][ T5371] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.312269][ T5369] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [ 74.346020][ T5369] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 5215] close(3 [pid 5367] <... mount resumed>) = 0 [pid 5367] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5367] chdir("./bus") = 0 [pid 5367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5367] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 74.392444][ T5367] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.418019][ T5367] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.419016][ T5369] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 5367] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5366] <... futex resumed>) = 0 [pid 5366] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5366] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... futex resumed>) = 0 [pid 5367] mkdir("./bus", 000 [pid 5371] <... mount resumed>) = 0 [pid 5367] <... mkdir resumed>) = 0 [pid 5367] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5371] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5367] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5371] <... openat resumed>) = 3 [pid 5371] chdir("./bus") = 0 [pid 5371] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5366] <... futex resumed>) = 0 [pid 5366] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... futex resumed>) = 0 [pid 5366] <... futex resumed>) = 1 [pid 5371] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5367] fspick(AT_FDCWD, ".", 0 [pid 5371] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5367] <... fspick resumed>) = 4 [pid 5366] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] <... futex resumed>) = 0 [pid 5367] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5370] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... futex resumed>) = 1 [pid 5366] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = 0 [pid 5370] <... futex resumed>) = 1 [pid 5367] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5366] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] mkdir("./bus", 000 [pid 5370] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... fsconfig resumed>) = 0 [pid 5366] <... futex resumed>) = 0 [pid 5367] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5366] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] <... futex resumed>) = 0 [pid 5366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5367] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5366] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5366] <... futex resumed>) = 0 [pid 5367] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 74.460202][ T5371] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.487977][ T5371] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 5366] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... umount2 resumed>) = 0 [pid 5371] <... mkdir resumed>) = 0 [pid 5371] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5371] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] <... futex resumed>) = 0 [pid 5370] <... futex resumed>) = 1 [pid 5371] fspick(AT_FDCWD, ".", 0) = 4 [pid 5370] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5371] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5370] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] <... fsconfig resumed>) = 0 [pid 5371] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5370] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = 0 [pid 5370] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5216] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5370] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5371] <... futex resumed>) = 0 [pid 5370] <... futex resumed>) = 1 [pid 5216] newfstatat(AT_FDCWD, "./4/bus", [pid 5371] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5370] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5216] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5216] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5216] close(4) = 0 [pid 5216] rmdir("./4/bus") = 0 [pid 5216] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] unlink("./4/binderfs" [pid 5366] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5366] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5366] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5216] <... unlink resumed>) = 0 [pid 5366] <... mprotect resumed>) = 0 [pid 5366] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5216] getdents64(3, [pid 5366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5216] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5216] close(3) = 0 [pid 5216] rmdir("./4"./strace-static-x86_64: Process 5393 attached ) = 0 [pid 5216] mkdir("./5", 0777 [pid 5393] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5366] <... clone3 resumed> => {parent_tid=[5393]}, 88) = 5393 [pid 5216] <... mkdir resumed>) = 0 [pid 5393] <... rseq resumed>) = 0 [pid 5366] rt_sigprocmask(SIG_SETMASK, [], [pid 5393] set_robust_list(0x7f37740339a0, 24 [pid 5366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5393] <... set_robust_list resumed>) = 0 [pid 5366] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5393] rt_sigprocmask(SIG_SETMASK, [], [pid 5366] <... futex resumed>) = 0 [pid 5393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5366] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5393] memfd_create("syzkaller", 0 [pid 5216] <... openat resumed>) = 3 [pid 5393] <... memfd_create resumed>) = 5 [pid 5216] ioctl(3, LOOP_CLR_FD [pid 5393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5216] <... ioctl resumed>) = 0 [pid 5393] <... mmap resumed>) = 0x7f376bc00000 [pid 5216] close(3 [pid 5393] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5370] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5370] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5395]}, 88) = 5395 [pid 5370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5370] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5370] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5395 attached [pid 5395] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5395] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5395] memfd_create("syzkaller", 0) = 5 [pid 5395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5369] <... mount resumed>) = 0 [pid 5369] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5369] chdir("./bus") = 0 [pid 5369] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5369] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5369] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] <... futex resumed>) = 0 [pid 5368] <... futex resumed>) = 1 [pid 5369] mkdir("./bus", 000 [pid 5367] <... fsconfig resumed>) = 0 [pid 5368] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5367] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.636176][ T5369] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 74.666822][ T5369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5367] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5393] <... write resumed>) = 2097152 [pid 5369] <... mkdir resumed>) = 0 [pid 5215] <... close resumed>) = 0 [pid 5369] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5369] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5393] munmap(0x7f376bc00000, 138412032 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... clone resumed>, child_tidptr=0x55556d635690) = 5396 ./strace-static-x86_64: Process 5396 attached [pid 5396] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5396] chdir("./5" [pid 5393] <... munmap resumed>) = 0 [pid 5369] <... futex resumed>) = 0 [pid 5368] <... futex resumed>) = 1 [pid 5369] fspick(AT_FDCWD, ".", 0) = 4 [pid 5369] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5369] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] <... chdir resumed>) = 0 [pid 5393] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5368] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5396] <... prctl resumed>) = 0 [pid 5368] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] setpgid(0, 0 [pid 5393] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5369] <... futex resumed>) = 0 [pid 5368] <... futex resumed>) = 1 [pid 5396] <... setpgid resumed>) = 0 [pid 5393] close(5 [pid 5369] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5368] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5369] <... fsconfig resumed>) = 0 [pid 5396] <... openat resumed>) = 3 [pid 5396] write(3, "1000", 4 [pid 5369] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] <... write resumed>) = 4 [pid 5369] <... futex resumed>) = 1 [pid 5368] <... futex resumed>) = 0 [pid 5396] close(3 [pid 5369] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] <... close resumed>) = 0 [pid 5396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5396] write(1, "executing program\n", 18 [pid 5395] <... write resumed>) = 2097152 [pid 5393] <... close resumed>) = 0 executing program [pid 5368] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] <... write resumed>) = 18 [pid 5396] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... futex resumed>) = 1 [pid 5395] munmap(0x7f376bc00000, 138412032 [pid 5368] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] <... futex resumed>) = 0 [pid 5369] <... futex resumed>) = 0 [pid 5396] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5369] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5396] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5396] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5396] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5396] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5396] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5397]}, 88) = 5397 [pid 5396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5396] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5397 attached [pid 5397] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5397] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5397] memfd_create("syzkaller", 0) = 3 [pid 5397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5395] <... munmap resumed>) = 0 [pid 5393] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5366] <... futex resumed>) = 0 [pid 5393] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5366] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] <... futex resumed>) = 0 [pid 5366] <... futex resumed>) = 1 [pid 5367] symlink("./file1", "./bus" [pid 5366] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5395] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5371] <... fsconfig resumed>) = 0 [pid 5395] close(5 [pid 5368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5371] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5371] <... futex resumed>) = 0 [pid 5368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5371] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5368] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5367] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5367] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5398 attached [pid 5368] <... clone3 resumed> => {parent_tid=[5398]}, 88) = 5398 [pid 5367] <... futex resumed>) = 1 [pid 5366] <... futex resumed>) = 0 [pid 5368] rt_sigprocmask(SIG_SETMASK, [], [pid 5366] exit_group(0 [pid 5398] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5393] <... futex resumed>) = ? [pid 5368] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5366] <... exit_group resumed>) = ? [pid 5368] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5367] +++ exited with 0 +++ [pid 5368] <... futex resumed>) = 0 [pid 5393] +++ exited with 0 +++ [pid 5366] +++ exited with 0 +++ [pid 5368] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5366, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=41 /* 0.41 s */} --- [pid 5214] restart_syscall(<... resuming interrupted clone ...> [pid 5398] <... rseq resumed>) = 0 [pid 5214] <... restart_syscall resumed>) = 0 [pid 5214] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5214] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5214] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5398] set_robust_list(0x7f37740339a0, 24 [pid 5395] <... close resumed>) = 0 [pid 5398] <... set_robust_list resumed>) = 0 [pid 5395] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] rt_sigprocmask(SIG_SETMASK, [], [pid 5395] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [ 74.778633][ T5367] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5395] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] memfd_create("syzkaller", 0 [pid 5370] <... futex resumed>) = 1 [pid 5370] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5398] <... memfd_create resumed>) = 5 [pid 5371] <... futex resumed>) = 0 [pid 5398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5371] symlink("./file1", "./bus" [pid 5398] <... mmap resumed>) = 0x7f376bc00000 [pid 5371] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5398] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5371] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5371] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] exit_group(0) = ? [pid 5369] <... fsconfig resumed>) = 0 [pid 5395] <... futex resumed>) = ? [pid 5371] <... futex resumed>) = ? [pid 5369] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] +++ exited with 0 +++ [pid 5371] +++ exited with 0 +++ [pid 5370] +++ exited with 0 +++ [pid 5369] <... futex resumed>) = 0 [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5370, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=41 /* 0.41 s */} --- [ 74.836768][ T5371] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5369] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5217] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5217] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5398] <... write resumed>) = 2097152 [pid 5398] munmap(0x7f376bc00000, 138412032) = 0 [pid 5398] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5398] close(5) = 0 [pid 5398] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... close resumed>) = 0 [pid 5214] <... umount2 resumed>) = 0 [pid 5398] <... futex resumed>) = 1 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5368] <... futex resumed>) = 1 [pid 5369] <... futex resumed>) = 0 [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5214] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5369] symlink("./file1", "./bus" [pid 5368] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5369] <... symlink resumed>) = -1 EEXIST (File exists) ./strace-static-x86_64: Process 5399 attached [pid 5214] newfstatat(AT_FDCWD, "./4/bus", [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5399 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5369] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5399] set_robust_list(0x55556d6356a0, 24 [pid 5369] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5399] <... set_robust_list resumed>) = 0 [pid 5399] chdir("./5") = 0 [pid 5399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5368] <... futex resumed>) = 0 [pid 5214] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5399] <... prctl resumed>) = 0 [pid 5399] setpgid(0, 0) = 0 [pid 5399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5368] exit_group(0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5369] <... futex resumed>) = ? [pid 5398] <... futex resumed>) = ? [pid 5368] <... exit_group resumed>) = ? [pid 5214] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5369] +++ exited with 0 +++ [pid 5399] <... openat resumed>) = 3 [pid 5399] write(3, "1000", 4) = 4 [pid 5399] close(3) = 0 [pid 5399] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5399] write(1, "executing program\n", 18) = 18 [pid 5399] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... openat resumed>) = 4 [pid 5399] <... futex resumed>) = 0 [pid 5214] newfstatat(4, "", [pid 5399] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5399] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5399] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5398] +++ exited with 0 +++ [pid 5397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5368] +++ exited with 0 +++ [ 74.987760][ T5369] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5399] <... mprotect resumed>) = 0 [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5368, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=44 /* 0.44 s */} --- [pid 5214] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] getdents64(4, [pid 5218] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] close(4 [pid 5218] <... openat resumed>) = 3 [pid 5214] <... close resumed>) = 0 [pid 5218] newfstatat(3, "", [pid 5214] rmdir("./4/bus" [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5218] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... rmdir resumed>) = 0 [pid 5214] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] <... umount2 resumed>) = 0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5214] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5399] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5214] unlink("./4/binderfs" [pid 5399] <... clone3 resumed> => {parent_tid=[5400]}, 88) = 5400 [pid 5214] <... unlink resumed>) = 0 [pid 5399] rt_sigprocmask(SIG_SETMASK, [], [pid 5214] getdents64(3, [pid 5399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5214] close(3) = 0 [pid 5399] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] rmdir("./4"./strace-static-x86_64: Process 5400 attached [pid 5399] <... futex resumed>) = 0 [pid 5214] <... rmdir resumed>) = 0 [pid 5400] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5399] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] mkdir("./5", 0777 [pid 5400] <... rseq resumed>) = 0 [pid 5400] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5400] memfd_create("syzkaller", 0) = 3 [pid 5214] <... mkdir resumed>) = 0 [pid 5400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5400] <... mmap resumed>) = 0x7f376bc00000 [pid 5214] <... openat resumed>) = 3 [pid 5214] ioctl(3, LOOP_CLR_FD) = 0 [pid 5214] close(3 [pid 5217] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5217] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5217] close(4) = 0 [pid 5217] rmdir("./4/bus") = 0 [pid 5217] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] unlink("./4/binderfs") = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5217] close(3) = 0 [pid 5217] rmdir("./4") = 0 [pid 5217] mkdir("./5", 0777) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5217] ioctl(3, LOOP_CLR_FD) = 0 [pid 5217] close(3 [pid 5218] <... umount2 resumed>) = 0 [pid 5218] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5218] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./4/bus") = 0 [pid 5218] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] unlink("./4/binderfs") = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3) = 0 [pid 5218] rmdir("./4") = 0 [pid 5218] mkdir("./5", 0777) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5218] ioctl(3, LOOP_CLR_FD) = 0 [pid 5218] close(3 [pid 5400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5214] <... close resumed>) = 0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5401 ./strace-static-x86_64: Process 5401 attached [pid 5401] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5401] chdir("./5") = 0 [pid 5401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5401] setpgid(0, 0) = 0 [pid 5401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5401] write(3, "1000", 4executing program ) = 4 [pid 5401] close(3) = 0 [pid 5401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5401] write(1, "executing program\n", 18) = 18 [pid 5401] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5217] <... close resumed>) = 0 [pid 5401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5401] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5402 attached [pid 5402] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5402] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5402] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5401] <... clone3 resumed> => {parent_tid=[5402]}, 88) = 5402 [pid 5401] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5403 attached NULL, 8) = 0 [pid 5401] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] set_robust_list(0x55556d6356a0, 24 [pid 5401] <... futex resumed>) = 1 [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5403 [pid 5402] <... futex resumed>) = 0 [pid 5401] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5403] <... set_robust_list resumed>) = 0 [pid 5402] memfd_create("syzkaller", 0) = 3 [pid 5403] chdir("./5" [pid 5402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5403] <... chdir resumed>) = 0 [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5403] setpgid(0, 0) = 0 [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5397] <... write resumed>) = 20699119 [pid 5403] write(3, "1000", 4) = 4 [pid 5397] munmap(0x7f376bc00000, 138412032 [pid 5403] close(3) = 0 [pid 5403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5403] write(1, "executing program\n", 18executing program ) = 18 [pid 5403] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5403] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5403] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5397] <... munmap resumed>) = 0 [pid 5403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5404]}, 88) = 5404 [pid 5397] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5403] rt_sigprocmask(SIG_SETMASK, [], [pid 5397] ioctl(4, LOOP_SET_FD, 3 [pid 5403] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5404 attached [pid 5403] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5404] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5403] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5397] <... ioctl resumed>) = 0 [pid 5404] <... rseq resumed>) = 0 [pid 5404] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5404] memfd_create("syzkaller", 0) = 3 [pid 5397] close(3 [pid 5404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5397] <... close resumed>) = 0 [pid 5404] <... mmap resumed>) = 0x7f376bc00000 [pid 5397] close(4) = 0 [pid 5397] mkdir("./bus", 0777) = 0 [ 75.581000][ T5397] loop1: detected capacity change from 0 to 40427 [pid 5397] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5218] <... close resumed>) = 0 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5405 ./strace-static-x86_64: Process 5405 attached [pid 5405] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5405] chdir("./5") = 0 [pid 5405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5405] setpgid(0, 0) = 0 [pid 5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5405] write(3, "1000", 4) = 4 [pid 5405] close(3) = 0 [pid 5405] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5405] write(1, "executing program\n", 18) = 18 [pid 5405] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5405] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5405] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5405] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5406]}, 88) = 5406 [pid 5405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5405] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5405] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5406 attached [pid 5406] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5406] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5406] memfd_create("syzkaller", 0) = 3 [pid 5406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 75.650322][ T5397] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 75.669938][ T5397] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 75.722672][ T5397] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5400] <... write resumed>) = 20699119 [pid 5400] munmap(0x7f376bc00000, 138412032) = 0 [pid 5400] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5400] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5400] close(3) = 0 [pid 5400] close(4) = 0 [pid 5400] mkdir("./bus", 0777) = 0 [pid 5400] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5397] <... mount resumed>) = 0 [pid 5397] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 75.892678][ T5397] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 75.894726][ T5400] loop2: detected capacity change from 0 to 40427 [ 75.916893][ T5397] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 75.934963][ T5400] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [pid 5397] chdir("./bus") = 0 [pid 5397] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5397] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5396] <... futex resumed>) = 0 [pid 5397] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... futex resumed>) = 0 [pid 5396] <... futex resumed>) = 1 [pid 5397] mkdir("./bus", 000 [pid 5396] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5397] <... mkdir resumed>) = 0 [pid 5397] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5397] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] <... futex resumed>) = 0 [pid 5396] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... futex resumed>) = 0 [pid 5396] <... futex resumed>) = 1 [pid 5397] fspick(AT_FDCWD, ".", 0 [pid 5396] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... fspick resumed>) = 4 [pid 5397] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5397] <... futex resumed>) = 0 [pid 5397] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5397] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5396] <... futex resumed>) = 0 [pid 5397] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5397] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5396] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] <... futex resumed>) = 0 [pid 5396] <... futex resumed>) = 1 [pid 5397] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 75.961043][ T5400] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 5396] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5396] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5396] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5396] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5396] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5396] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5414]}, 88) = 5414 [pid 5396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5396] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5396] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5414 attached [pid 5414] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5414] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5414] memfd_create("syzkaller", 0) = 5 [pid 5414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 76.043409][ T5400] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 5414] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5414] munmap(0x7f376bc00000, 138412032) = 0 [pid 5414] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5414] close(5 [pid 5397] <... fsconfig resumed>) = 0 [pid 5397] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5397] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5414] <... close resumed>) = 0 [pid 5414] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... mount resumed>) = 0 [pid 5414] <... futex resumed>) = 1 [pid 5400] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5414] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5400] <... openat resumed>) = 3 [pid 5400] chdir("./bus") = 0 [pid 5396] <... futex resumed>) = 0 [pid 5400] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5396] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5396] <... futex resumed>) = 1 [pid 5400] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5400] <... futex resumed>) = 1 [pid 5399] <... futex resumed>) = 0 [pid 5400] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5399] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5399] <... futex resumed>) = 0 [pid 5400] mkdir("./bus", 000 [pid 5399] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... futex resumed>) = 0 [ 76.185590][ T5400] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.208070][ T5400] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 5397] symlink("./file1", "./bus" [pid 5400] <... mkdir resumed>) = 0 [pid 5397] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5397] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5396] <... futex resumed>) = 0 [pid 5397] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] exit_group(0 [pid 5414] <... futex resumed>) = ? [pid 5397] <... futex resumed>) = ? [pid 5396] <... exit_group resumed>) = ? [pid 5414] +++ exited with 0 +++ [pid 5400] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] +++ exited with 0 +++ [pid 5396] +++ exited with 0 +++ [pid 5400] <... futex resumed>) = 1 [pid 5399] <... futex resumed>) = 0 [pid 5400] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5399] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5399] <... futex resumed>) = 0 [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5396, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=39 /* 0.39 s */} --- [pid 5400] fspick(AT_FDCWD, ".", 0 [pid 5399] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] restart_syscall(<... resuming interrupted clone ...> [pid 5400] <... fspick resumed>) = 4 [pid 5400] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5399] <... futex resumed>) = 0 [pid 5399] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5399] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5400] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5400] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5399] <... futex resumed>) = 0 [pid 5399] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5215] <... restart_syscall resumed>) = 0 [pid 5399] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5215] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5215] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5400] <... futex resumed>) = 1 [ 76.254005][ T5397] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5400] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5402] <... write resumed>) = 20699119 [pid 5402] munmap(0x7f376bc00000, 138412032 [pid 5399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5399] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5399] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5399] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5416]}, 88) = 5416 [pid 5399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5399] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5399] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5416 attached [pid 5416] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5416] set_robust_list(0x7f37740339a0, 24 [pid 5402] <... munmap resumed>) = 0 [pid 5416] <... set_robust_list resumed>) = 0 [pid 5416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5416] memfd_create("syzkaller", 0 [pid 5402] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5416] <... memfd_create resumed>) = 5 [pid 5416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5402] <... openat resumed>) = 4 [pid 5416] <... mmap resumed>) = 0x7f376bc00000 [pid 5402] ioctl(4, LOOP_SET_FD, 3 [pid 5416] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5402] <... ioctl resumed>) = 0 [pid 5402] close(3) = 0 [pid 5402] close(4) = 0 [pid 5404] <... write resumed>) = 20699119 [ 76.388228][ T5402] loop0: detected capacity change from 0 to 40427 [pid 5402] mkdir("./bus", 0777) = 0 [pid 5402] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5416] <... write resumed>) = 2097152 [pid 5416] munmap(0x7f376bc00000, 138412032) = 0 [pid 5416] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5404] munmap(0x7f376bc00000, 138412032 [pid 5416] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5416] close(5 [pid 5400] <... fsconfig resumed>) = 0 [pid 5400] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5404] <... munmap resumed>) = 0 [ 76.458953][ T5402] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 76.466831][ T5402] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 5404] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5416] <... close resumed>) = 0 [pid 5404] <... openat resumed>) = 4 [pid 5215] <... umount2 resumed>) = 0 [pid 5416] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] ioctl(4, LOOP_SET_FD, 3 [pid 5416] <... futex resumed>) = 1 [pid 5215] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5416] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] <... write resumed>) = 20699119 [pid 5404] <... ioctl resumed>) = 0 [pid 5399] <... futex resumed>) = 0 [pid 5406] munmap(0x7f376bc00000, 138412032 [pid 5404] close(3 [pid 5399] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] <... close resumed>) = 0 [pid 5400] <... futex resumed>) = 0 [pid 5399] <... futex resumed>) = 1 [pid 5215] newfstatat(AT_FDCWD, "./5/bus", [pid 5404] close(4 [pid 5400] symlink("./file1", "./bus" [pid 5399] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5404] <... close resumed>) = 0 [pid 5215] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5215] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5404] mkdir("./bus", 0777 [pid 5215] getdents64(4, [pid 5404] <... mkdir resumed>) = 0 [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5215] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5215] close(4) = 0 [pid 5215] rmdir("./5/bus" [pid 5404] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5215] <... rmdir resumed>) = 0 [pid 5215] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] unlink("./5/binderfs") = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5215] close(3) = 0 [pid 5215] rmdir("./5") = 0 [pid 5406] <... munmap resumed>) = 0 [ 76.519212][ T5402] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.529365][ T5404] loop3: detected capacity change from 0 to 40427 [ 76.549658][ T5400] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5215] mkdir("./6", 0777) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [pid 5215] close(3 [pid 5400] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5400] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5406] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5399] <... futex resumed>) = 0 [pid 5406] <... openat resumed>) = 4 [pid 5400] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5399] exit_group(0 [pid 5416] <... futex resumed>) = ? [pid 5399] <... exit_group resumed>) = ? [pid 5406] ioctl(4, LOOP_SET_FD, 3 [pid 5400] <... futex resumed>) = ? [pid 5416] +++ exited with 0 +++ [pid 5400] +++ exited with 0 +++ [pid 5399] +++ exited with 0 +++ [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5399, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=47 /* 0.47 s */} --- [pid 5216] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5216] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5406] <... ioctl resumed>) = 0 [pid 5216] <... openat resumed>) = 3 [pid 5406] close(3 [pid 5216] newfstatat(3, "", [pid 5406] <... close resumed>) = 0 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5406] close(4 [pid 5216] getdents64(3, [pid 5406] <... close resumed>) = 0 [pid 5406] mkdir("./bus", 0777 [pid 5216] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5406] <... mkdir resumed>) = 0 [ 76.572026][ T5404] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 76.589277][ T5406] loop4: detected capacity change from 0 to 40427 [ 76.600282][ T5404] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 5216] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [ 76.659229][ T5406] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 76.673293][ T5406] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.683792][ T5404] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.689123][ T5402] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 76.697525][ T5402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 5406] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5402] <... mount resumed>) = 0 [pid 5402] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5402] chdir("./bus") = 0 [pid 5402] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5402] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5401] <... futex resumed>) = 0 [pid 5401] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5402] mkdir("./bus", 000) = 0 [pid 5216] <... umount2 resumed>) = 0 [ 76.754231][ T5406] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 5216] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5402] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5402] <... futex resumed>) = 1 [pid 5401] <... futex resumed>) = 0 [pid 5216] newfstatat(AT_FDCWD, "./5/bus", [pid 5401] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5402] fspick(AT_FDCWD, ".", 0) = 4 [pid 5402] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5401] <... futex resumed>) = 0 [pid 5401] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5402] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5402] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... futex resumed>) = 0 [pid 5401] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5402] <... futex resumed>) = 1 [pid 5402] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 76.799253][ T5404] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [pid 5216] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5216] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] getdents64(4, [pid 5401] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5216] getdents64(4, [pid 5401] <... mmap resumed>) = 0x7f3774013000 [pid 5401] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5401] <... mprotect resumed>) = 0 [pid 5401] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5216] close(4 [pid 5401] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5216] <... close resumed>) = 0 [pid 5216] rmdir("./5/bus"./strace-static-x86_64: Process 5428 attached [pid 5401] <... clone3 resumed> => {parent_tid=[5428]}, 88) = 5428 [pid 5428] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5401] rt_sigprocmask(SIG_SETMASK, [], [pid 5216] <... rmdir resumed>) = 0 [pid 5428] <... rseq resumed>) = 0 [pid 5401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5428] set_robust_list(0x7f37740339a0, 24 [pid 5404] <... mount resumed>) = 0 [pid 5401] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5428] <... set_robust_list resumed>) = 0 [pid 5404] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5401] <... futex resumed>) = 0 [pid 5428] rt_sigprocmask(SIG_SETMASK, [], [pid 5401] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5216] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5404] <... openat resumed>) = 3 [pid 5404] chdir("./bus" [pid 5216] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5404] <... chdir resumed>) = 0 [pid 5216] unlink("./5/binderfs" [pid 5404] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] <... unlink resumed>) = 0 [pid 5428] memfd_create("syzkaller", 0 [pid 5404] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5216] getdents64(3, [pid 5404] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5404] <... futex resumed>) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5404] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] close(3 [pid 5404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5403] <... futex resumed>) = 0 [pid 5404] mkdir("./bus", 000 [pid 5403] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... close resumed>) = 0 [pid 5428] <... memfd_create resumed>) = 5 [pid 5428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5216] rmdir("./5") = 0 [ 76.840364][ T59] cfg80211: failed to load regulatory.db [ 76.846203][ T5404] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 5404] <... mkdir resumed>) = 0 [pid 5216] mkdir("./6", 0777 [pid 5404] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... mkdir resumed>) = 0 [pid 5215] <... close resumed>) = 0 [pid 5428] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5404] <... futex resumed>) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5404] fspick(AT_FDCWD, ".", 0 [pid 5403] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... openat resumed>) = 3 [pid 5404] <... fspick resumed>) = 4 [pid 5216] ioctl(3, LOOP_CLR_FD [pid 5403] <... futex resumed>) = 0 [pid 5403] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... ioctl resumed>) = 0 [pid 5216] close(3 [pid 5215] <... clone resumed>, child_tidptr=0x55556d635690) = 5430 ./strace-static-x86_64: Process 5430 attached [ 76.911682][ T5406] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.924144][ T5406] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5404] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... mount resumed>) = 0 [pid 5404] <... futex resumed>) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5406] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5404] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5403] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] <... fsconfig resumed>) = 0 [pid 5403] <... futex resumed>) = 0 [pid 5406] <... openat resumed>) = 3 [pid 5404] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5406] chdir("./bus" [pid 5404] <... futex resumed>) = 0 [pid 5403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5404] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] <... chdir resumed>) = 0 [pid 5404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5403] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5403] <... futex resumed>) = 0 [pid 5430] set_robust_list(0x55556d6356a0, 24 [pid 5403] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] <... set_robust_list resumed>) = 0 [pid 5430] chdir("./6") = 0 [pid 5430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5430] setpgid(0, 0) = 0 [pid 5430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5430] write(3, "1000", 4) = 4 [pid 5430] close(3) = 0 [pid 5430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5430] write(1, "executing program\n", 18executing program ) = 18 [pid 5430] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5430] <... futex resumed>) = 0 [pid 5430] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5406] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5430] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5430] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5430] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5430] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5406] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5406] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5430] <... clone3 resumed> => {parent_tid=[5431]}, 88) = 5431 [pid 5430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5430] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5431 attached [pid 5428] <... write resumed>) = 2097152 [pid 5406] mkdir("./bus", 000 [pid 5405] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5431] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5431] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5405] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] memfd_create("syzkaller", 0) = 3 [pid 5431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5428] munmap(0x7f376bc00000, 138412032 [pid 5406] <... mkdir resumed>) = 0 [pid 5403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5428] <... munmap resumed>) = 0 [pid 5406] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5403] <... futex resumed>) = 0 [pid 5406] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [pid 5403] <... mmap resumed>) = 0x7f3774013000 [pid 5406] fspick(AT_FDCWD, ".", 0 [pid 5405] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5403] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5428] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5406] <... fspick resumed>) = 4 [pid 5403] <... mprotect resumed>) = 0 [pid 5406] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5403] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5406] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5405] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5406] <... fsconfig resumed>) = 0 [pid 5405] <... futex resumed>) = 0 [pid 5403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5406] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5405] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5432 attached [pid 5406] <... futex resumed>) = 0 [pid 5405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5402] <... fsconfig resumed>) = 0 [pid 5432] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5406] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] <... clone3 resumed> => {parent_tid=[5432]}, 88) = 5432 [pid 5432] <... rseq resumed>) = 0 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5403] rt_sigprocmask(SIG_SETMASK, [], [pid 5405] <... futex resumed>) = 0 [pid 5406] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5432] set_robust_list(0x7f37740339a0, 24 [pid 5405] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5403] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... set_robust_list resumed>) = 0 [pid 5403] <... futex resumed>) = 0 [pid 5428] close(5 [pid 5403] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5432] rt_sigprocmask(SIG_SETMASK, [], [pid 5402] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5402] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5432] memfd_create("syzkaller", 0) = 5 [pid 5432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5428] <... close resumed>) = 0 [pid 5428] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... futex resumed>) = 0 [pid 5401] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5402] <... futex resumed>) = 0 [pid 5401] <... futex resumed>) = 1 [pid 5402] symlink("./file1", "./bus" [pid 5401] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5428] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5428] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5405] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5405] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5402] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5402] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5401] <... futex resumed>) = 0 [pid 5401] exit_group(0 [pid 5428] <... futex resumed>) = ? [pid 5401] <... exit_group resumed>) = ? [pid 5428] +++ exited with 0 +++ [pid 5402] +++ exited with 0 +++ [pid 5401] +++ exited with 0 +++ [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5401, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=43 /* 0.43 s */} --- [pid 5214] restart_syscall(<... resuming interrupted clone ...> [pid 5405] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5214] <... restart_syscall resumed>) = 0 [pid 5214] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5214] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5214] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5405] <... clone3 resumed> => {parent_tid=[5433]}, 88) = 5433 [pid 5405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5405] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 77.076038][ T5402] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5405] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5433 attached [pid 5433] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5433] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5433] memfd_create("syzkaller", 0) = 5 [pid 5433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5432] <... write resumed>) = 2097152 [pid 5432] munmap(0x7f376bc00000, 138412032) = 0 [pid 5404] <... fsconfig resumed>) = 0 [pid 5432] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5404] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5404] <... futex resumed>) = 0 [pid 5433] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5432] close(5 [pid 5404] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5432] <... close resumed>) = 0 [pid 5432] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5432] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] <... futex resumed>) = 0 [pid 5403] <... futex resumed>) = 1 [pid 5404] symlink("./file1", "./bus" [pid 5403] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5433] <... write resumed>) = 2097152 [pid 5433] munmap(0x7f376bc00000, 138412032) = 0 [pid 5406] <... fsconfig resumed>) = 0 [pid 5404] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5406] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = 0 [pid 5404] <... futex resumed>) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5406] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5404] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] exit_group(0) = ? [pid 5432] <... futex resumed>) = ? [pid 5404] <... futex resumed>) = ? [pid 5432] +++ exited with 0 +++ [pid 5433] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5404] +++ exited with 0 +++ [pid 5403] +++ exited with 0 +++ [pid 5433] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5433] close(5 [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=37 /* 0.37 s */} --- [pid 5217] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5217] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5217] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [ 77.280285][ T5404] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5217] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5433] <... close resumed>) = 0 [pid 5433] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... close resumed>) = 0 [pid 5433] <... futex resumed>) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5214] <... umount2 resumed>) = 0 [pid 5433] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5214] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5405] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5406] <... futex resumed>) = 0 [pid 5405] <... futex resumed>) = 1 [pid 5214] newfstatat(AT_FDCWD, "./5/bus", [pid 5406] symlink("./file1", "./bus" [pid 5405] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5434 attached [pid 5214] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5434 [pid 5434] set_robust_list(0x55556d6356a0, 24 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5434] <... set_robust_list resumed>) = 0 [pid 5214] <... openat resumed>) = 4 [pid 5434] chdir("./6" [pid 5431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5214] newfstatat(4, "", [pid 5434] <... chdir resumed>) = 0 [pid 5434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5434] <... prctl resumed>) = 0 [pid 5214] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5434] setpgid(0, 0) = 0 [pid 5214] getdents64(4, [pid 5406] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5214] close(4 [pid 5406] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... close resumed>) = 0 [pid 5405] <... futex resumed>) = 0 [pid 5214] rmdir("./5/bus" [pid 5434] <... openat resumed>) = 3 [pid 5405] exit_group(0 [pid 5433] <... futex resumed>) = ? [pid 5405] <... exit_group resumed>) = ? [pid 5433] +++ exited with 0 +++ [pid 5406] <... futex resumed>) = ? [pid 5434] write(3, "1000", 4 [pid 5406] +++ exited with 0 +++ [pid 5405] +++ exited with 0 +++ [pid 5214] <... rmdir resumed>) = 0 [pid 5434] <... write resumed>) = 4 [pid 5214] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5434] close(3 [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5405, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=47 /* 0.47 s */} --- [pid 5434] <... close resumed>) = 0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] restart_syscall(<... resuming interrupted clone ...> [pid 5434] symlink("/dev/binderfs", "./binderfs" [pid 5214] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5434] <... symlink resumed>) = 0 executing program [pid 5434] write(1, "executing program\n", 18 [pid 5214] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5434] <... write resumed>) = 18 [pid 5214] unlink("./5/binderfs") = 0 [pid 5434] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] getdents64(3, [pid 5434] <... futex resumed>) = 0 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5434] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5218] <... restart_syscall resumed>) = 0 [pid 5434] <... rt_sigaction resumed>NULL, 8) = 0 [ 77.420498][ T5406] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5214] close(3 [pid 5434] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5214] <... close resumed>) = 0 [pid 5214] rmdir("./5" [pid 5218] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... rmdir resumed>) = 0 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] mkdir("./6", 0777 [pid 5218] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] <... mkdir resumed>) = 0 [pid 5218] <... openat resumed>) = 3 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5218] newfstatat(3, "", [pid 5214] <... openat resumed>) = 3 [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] ioctl(3, LOOP_CLR_FD [pid 5218] getdents64(3, [pid 5214] <... ioctl resumed>) = 0 [pid 5218] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5214] close(3 [pid 5218] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5434] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5435]}, 88) = 5435 [pid 5434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5434] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5435 attached [pid 5435] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5435] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5435] memfd_create("syzkaller", 0 [pid 5217] <... umount2 resumed>) = 0 [pid 5435] <... memfd_create resumed>) = 3 [pid 5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5217] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5217] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5217] close(4) = 0 [pid 5217] rmdir("./5/bus") = 0 [pid 5217] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] unlink("./5/binderfs") = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5217] close(3) = 0 [pid 5217] rmdir("./5") = 0 [pid 5217] mkdir("./6", 0777) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5217] ioctl(3, LOOP_CLR_FD) = 0 [pid 5217] close(3 [pid 5218] <... umount2 resumed>) = 0 [pid 5218] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5218] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./5/bus") = 0 [pid 5218] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] unlink("./5/binderfs") = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3) = 0 [pid 5218] rmdir("./5") = 0 [pid 5218] mkdir("./6", 0777) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5218] ioctl(3, LOOP_CLR_FD) = 0 [pid 5218] close(3 [pid 5214] <... close resumed>) = 0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5436 ./strace-static-x86_64: Process 5436 attached [pid 5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5436] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5436] chdir("./6") = 0 [pid 5436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5436] setpgid(0, 0) = 0 [pid 5436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5436] write(3, "1000", 4) = 4 [pid 5436] close(3executing program ) = 0 [pid 5436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5436] write(1, "executing program\n", 18) = 18 [pid 5436] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5436] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5437]}, 88) = 5437 [pid 5436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5436] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5431] <... write resumed>) = 20699119 ./strace-static-x86_64: Process 5437 attached [pid 5431] munmap(0x7f376bc00000, 138412032 [pid 5437] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5437] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5437] memfd_create("syzkaller", 0) = 3 [pid 5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5431] <... munmap resumed>) = 0 [pid 5431] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5431] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5217] <... close resumed>) = 0 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5431] close(3) = 0 ./strace-static-x86_64: Process 5438 attached [pid 5438] set_robust_list(0x55556d6356a0, 24 [pid 5431] close(4 [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5438 [pid 5438] <... set_robust_list resumed>) = 0 [pid 5431] <... close resumed>) = 0 [pid 5431] mkdir("./bus", 0777) = 0 [pid 5431] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5438] chdir("./6") = 0 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5438] setpgid(0, 0) = 0 [ 78.080510][ T5431] loop1: detected capacity change from 0 to 40427 [ 78.093553][ T5431] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5438] write(3, "1000", 4) = 4 [pid 5438] close(3) = 0 [pid 5438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5438] write(1, "executing program\n", 18executing program ) = 18 [pid 5438] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5438] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5438] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5442]}, 88) = 5442 [pid 5438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5438] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5442 attached ) = 0 [pid 5442] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5438] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5442] <... rseq resumed>) = 0 [pid 5442] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5442] memfd_create("syzkaller", 0) = 3 [pid 5442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 78.128138][ T5431] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.157006][ T5431] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5218] <... close resumed>) = 0 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5443 attached , child_tidptr=0x55556d635690) = 5443 [pid 5443] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5443] chdir("./6") = 0 [pid 5443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5443] setpgid(0, 0) = 0 [pid 5443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5443] write(3, "1000", 4) = 4 [pid 5443] close(3) = 0 [pid 5443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5443] write(1, "executing program\n", 18executing program ) = 18 [pid 5443] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5443] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5445 attached => {parent_tid=[5445]}, 88) = 5445 [pid 5445] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5443] rt_sigprocmask(SIG_SETMASK, [], [pid 5445] <... rseq resumed>) = 0 [pid 5443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5445] set_robust_list(0x7f37740549a0, 24 [pid 5443] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... set_robust_list resumed>) = 0 [pid 5443] <... futex resumed>) = 0 [pid 5445] rt_sigprocmask(SIG_SETMASK, [], [pid 5443] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5445] memfd_create("syzkaller", 0) = 3 [pid 5445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5431] <... mount resumed>) = 0 [pid 5431] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5431] chdir("./bus") = 0 [pid 5431] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5431] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... futex resumed>) = 0 [pid 5430] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] <... futex resumed>) = 1 [pid 5431] mkdir("./bus", 000) = 0 [pid 5431] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5430] <... futex resumed>) = 0 [ 78.256642][ T5431] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.273712][ T5431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 5430] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] fspick(AT_FDCWD, ".", 0) = 4 [pid 5431] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... futex resumed>) = 0 [pid 5430] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] <... futex resumed>) = 1 [pid 5431] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5431] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5430] <... futex resumed>) = 0 [pid 5430] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5430] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5430] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5430] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5430] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5446]}, 88) = 5446 ./strace-static-x86_64: Process 5446 attached [pid 5430] rt_sigprocmask(SIG_SETMASK, [], [pid 5446] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5430] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5446] <... rseq resumed>) = 0 [pid 5446] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5446] memfd_create("syzkaller", 0) = 5 [pid 5446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5446] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5431] <... fsconfig resumed>) = 0 [pid 5446] <... write resumed>) = 2097152 [pid 5431] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] munmap(0x7f376bc00000, 138412032 [pid 5431] <... futex resumed>) = 0 [pid 5431] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5446] <... munmap resumed>) = 0 [pid 5446] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5446] close(5) = 0 [pid 5446] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5430] <... futex resumed>) = 0 [pid 5446] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5430] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5431] <... futex resumed>) = 0 [pid 5430] <... futex resumed>) = 1 [pid 5431] symlink("./file1", "./bus" [pid 5430] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5435] <... write resumed>) = 20699119 [pid 5431] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5431] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] munmap(0x7f376bc00000, 138412032 [pid 5431] <... futex resumed>) = 1 [pid 5431] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5430] <... futex resumed>) = 0 [pid 5430] exit_group(0 [pid 5446] <... futex resumed>) = ? [pid 5431] <... futex resumed>) = ? [pid 5430] <... exit_group resumed>) = ? [pid 5446] +++ exited with 0 +++ [pid 5431] +++ exited with 0 +++ [pid 5430] +++ exited with 0 +++ [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5430, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 5215] restart_syscall(<... resuming interrupted clone ...> [pid 5435] <... munmap resumed>) = 0 [pid 5442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5435] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5215] <... restart_syscall resumed>) = 0 [pid 5435] <... openat resumed>) = 4 [pid 5215] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 78.527564][ T5431] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5435] ioctl(4, LOOP_SET_FD, 3 [pid 5215] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5215] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5215] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5435] <... ioctl resumed>) = 0 [pid 5435] close(3) = 0 [pid 5435] close(4) = 0 [pid 5435] mkdir("./bus", 0777) = 0 [ 78.588220][ T5435] loop2: detected capacity change from 0 to 40427 [ 78.626483][ T5435] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 78.637979][ T5435] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 78.696984][ T5435] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 5435] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5215] <... umount2 resumed>) = 0 [pid 5215] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5215] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5215] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5215] close(4) = 0 [pid 5215] rmdir("./6/bus") = 0 [pid 5215] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] unlink("./6/binderfs") = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5215] close(3) = 0 [pid 5215] rmdir("./6") = 0 [pid 5215] mkdir("./7", 0777) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [pid 5215] close(3 [pid 5435] <... mount resumed>) = 0 [ 78.877938][ T5435] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 78.885020][ T5435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 5435] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5435] chdir("./bus") = 0 [pid 5435] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5435] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5435] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5434] <... futex resumed>) = 0 [pid 5435] mkdir("./bus", 000 [pid 5434] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5435] <... mkdir resumed>) = 0 [pid 5435] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... write resumed>) = 20699119 [pid 5437] munmap(0x7f376bc00000, 138412032 [pid 5435] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5435] fspick(AT_FDCWD, ".", 0 [pid 5434] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... fspick resumed>) = 4 [pid 5434] <... futex resumed>) = 0 [pid 5435] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5435] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5434] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... fsconfig resumed>) = 0 [pid 5434] <... futex resumed>) = 0 [pid 5435] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5435] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5434] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... munmap resumed>) = 0 [pid 5434] <... futex resumed>) = 0 [pid 5434] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5437] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5437] close(3) = 0 [pid 5437] close(4) = 0 [pid 5437] mkdir("./bus", 0777 [pid 5434] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5434] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... mkdir resumed>) = 0 [pid 5434] <... futex resumed>) = 0 [pid 5437] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5445] <... write resumed>) = 20699119 [ 79.019190][ T5437] loop0: detected capacity change from 0 to 40427 [pid 5434] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5445] munmap(0x7f376bc00000, 138412032 [pid 5434] <... mprotect resumed>) = 0 [pid 5434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5451 attached => {parent_tid=[5451]}, 88) = 5451 [pid 5434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5434] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5445] <... munmap resumed>) = 0 [pid 5451] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5445] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5445] ioctl(4, LOOP_SET_FD, 3 [pid 5451] <... rseq resumed>) = 0 [pid 5451] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5451] memfd_create("syzkaller", 0) = 5 [pid 5451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5442] <... write resumed>) = 20699119 [pid 5442] munmap(0x7f376bc00000, 138412032 [pid 5451] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5445] <... ioctl resumed>) = 0 [pid 5445] close(3) = 0 [pid 5445] close(4) = 0 [pid 5445] mkdir("./bus", 0777) = 0 [ 79.070543][ T5437] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 79.097931][ T5437] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 79.105045][ T5445] loop4: detected capacity change from 0 to 40427 [pid 5445] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5442] <... munmap resumed>) = 0 [pid 5442] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5442] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5435] <... fsconfig resumed>) = 0 [pid 5435] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... close resumed>) = 0 [pid 5435] <... futex resumed>) = 0 [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5455 attached [pid 5442] close(3 [pid 5435] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5455] set_robust_list(0x55556d6356a0, 24 [pid 5442] <... close resumed>) = 0 [pid 5455] <... set_robust_list resumed>) = 0 [pid 5442] close(4 [pid 5455] chdir("./7" [pid 5451] <... write resumed>) = 2097152 [pid 5442] <... close resumed>) = 0 [pid 5442] mkdir("./bus", 0777 [pid 5215] <... clone resumed>, child_tidptr=0x55556d635690) = 5455 [pid 5442] <... mkdir resumed>) = 0 [pid 5455] <... chdir resumed>) = 0 [pid 5451] munmap(0x7f376bc00000, 138412032 [ 79.156489][ T5445] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 79.165930][ T5437] F2FS-fs (loop0): Found nat_bits in checkpoint [ 79.179213][ T5442] loop3: detected capacity change from 0 to 40427 [ 79.189147][ T5445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 5442] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5451] <... munmap resumed>) = 0 [pid 5455] <... prctl resumed>) = 0 [pid 5451] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5455] setpgid(0, 0 [pid 5451] close(5 [pid 5455] <... setpgid resumed>) = 0 [pid 5455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5455] write(3, "1000", 4) = 4 [pid 5455] close(3) = 0 [pid 5455] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5455] write(1, "executing program\n", 18) = 18 [pid 5455] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5455] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5455] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5455] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5455] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 79.222662][ T5442] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 79.244751][ T5442] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 79.263994][ T5445] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 5455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5461 attached => {parent_tid=[5461]}, 88) = 5461 [pid 5451] <... close resumed>) = 0 [pid 5461] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5455] rt_sigprocmask(SIG_SETMASK, [], [pid 5451] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] <... rseq resumed>) = 0 [pid 5455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5451] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5451] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = 1 [pid 5461] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5455] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... mount resumed>) = 0 [pid 5435] symlink("./file1", "./bus" [pid 5461] rt_sigprocmask(SIG_SETMASK, [], [pid 5434] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] <... futex resumed>) = 0 [pid 5437] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5455] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5437] <... openat resumed>) = 3 [pid 5437] chdir("./bus") = 0 [pid 5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5437] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5436] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] mkdir("./bus", 000 [pid 5461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5461] memfd_create("syzkaller", 0) = 3 [pid 5461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5437] <... mkdir resumed>) = 0 [pid 5437] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5436] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] fspick(AT_FDCWD, ".", 0 [pid 5436] <... futex resumed>) = 0 [pid 5435] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5436] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5435] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... fspick resumed>) = 4 [pid 5437] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5434] exit_group(0 [pid 5437] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5436] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] <... exit_group resumed>) = ? [pid 5437] <... fsconfig resumed>) = 0 [pid 5436] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5451] <... futex resumed>) = ? [pid 5451] +++ exited with 0 +++ [pid 5437] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] +++ exited with 0 +++ [pid 5434] +++ exited with 0 +++ [pid 5437] <... futex resumed>) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5436] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5436] <... futex resumed>) = 0 [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5434, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=41 /* 0.41 s */} --- [pid 5436] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5216] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5216] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 79.289750][ T5437] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 79.297463][ T5437] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.308072][ T5442] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.309690][ T5435] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5216] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5216] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5436] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5436] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5465 attached [pid 5445] <... mount resumed>) = 0 [pid 5436] <... clone3 resumed> => {parent_tid=[5465]}, 88) = 5465 [pid 5436] rt_sigprocmask(SIG_SETMASK, [], [pid 5445] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5436] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 79.383997][ T5445] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 79.408027][ T5445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5436] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... openat resumed>) = 3 [pid 5436] <... futex resumed>) = 0 [pid 5465] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5465] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5465] memfd_create("syzkaller", 0) = 5 [pid 5465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5445] chdir("./bus" [pid 5436] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5445] <... chdir resumed>) = 0 [pid 5445] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5445] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5443] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5465] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5445] mkdir("./bus", 000) = 0 [pid 5445] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] <... mount resumed>) = 0 [pid 5445] <... futex resumed>) = 1 [pid 5442] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5445] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] <... futex resumed>) = 0 [pid 5442] <... openat resumed>) = 3 [pid 5443] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] chdir("./bus" [pid 5445] <... futex resumed>) = 0 [pid 5443] <... futex resumed>) = 1 [pid 5442] <... chdir resumed>) = 0 [pid 5445] fspick(AT_FDCWD, ".", 0 [pid 5442] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5445] <... fspick resumed>) = 4 [pid 5443] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5442] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5445] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5442] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = 0 [pid 5443] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5443] <... futex resumed>) = 0 [pid 5442] <... futex resumed>) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5445] <... fsconfig resumed>) = 0 [pid 5443] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5442] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5445] <... futex resumed>) = 0 [pid 5443] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5443] <... futex resumed>) = 0 [ 79.433643][ T5442] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 79.451139][ T5442] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 5442] mkdir("./bus", 000 [pid 5438] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5443] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5465] <... write resumed>) = 2097152 [pid 5442] <... mkdir resumed>) = 0 [pid 5437] <... fsconfig resumed>) = 0 [pid 5442] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... umount2 resumed>) = 0 [pid 5442] <... futex resumed>) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 0 [pid 5216] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5442] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5442] fspick(AT_FDCWD, ".", 0 [pid 5438] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] newfstatat(AT_FDCWD, "./6/bus", [pid 5442] <... fspick resumed>) = 4 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5442] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5442] <... futex resumed>) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5442] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5442] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5438] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... openat resumed>) = 4 [pid 5442] <... fsconfig resumed>) = 0 [pid 5216] newfstatat(4, "", [pid 5442] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5442] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5216] getdents64(4, [pid 5442] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5438] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5465] munmap(0x7f376bc00000, 138412032 [pid 5443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] getdents64(4, [pid 5443] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5443] <... futex resumed>) = 0 [pid 5216] close(4 [pid 5443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5216] <... close resumed>) = 0 [pid 5443] <... mmap resumed>) = 0x7f3774013000 [pid 5216] rmdir("./6/bus" [pid 5443] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5216] <... rmdir resumed>) = 0 [pid 5465] <... munmap resumed>) = 0 [pid 5443] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5216] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5443] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5216] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5467 attached [pid 5443] <... clone3 resumed> => {parent_tid=[5467]}, 88) = 5467 [pid 5216] unlink("./6/binderfs" [pid 5467] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5443] rt_sigprocmask(SIG_SETMASK, [], [pid 5216] <... unlink resumed>) = 0 [pid 5467] set_robust_list(0x7f37740339a0, 24 [pid 5465] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] getdents64(3, [pid 5467] <... set_robust_list resumed>) = 0 [pid 5467] rt_sigprocmask(SIG_SETMASK, [], [pid 5465] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5443] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5467] memfd_create("syzkaller", 0 [pid 5465] close(5 [pid 5443] <... futex resumed>) = 0 [pid 5216] close(3 [pid 5467] <... memfd_create resumed>) = 5 [pid 5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5443] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5216] <... close resumed>) = 0 [pid 5467] <... mmap resumed>) = 0x7f376bc00000 [pid 5216] rmdir("./6") = 0 [pid 5216] mkdir("./7", 0777 [pid 5438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] <... mkdir resumed>) = 0 [pid 5438] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5438] <... futex resumed>) = 0 [pid 5216] ioctl(3, LOOP_CLR_FD [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5465] <... close resumed>) = 0 [pid 5438] <... mmap resumed>) = 0x7f3774013000 [pid 5216] <... ioctl resumed>) = 0 [pid 5438] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5216] close(3 [pid 5438] <... mprotect resumed>) = 0 [pid 5445] <... fsconfig resumed>) = 0 [pid 5438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5468 attached [pid 5465] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] <... futex resumed>) = 1 [pid 5465] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5436] <... futex resumed>) = 0 [pid 5468] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5445] <... futex resumed>) = 0 [pid 5438] <... clone3 resumed> => {parent_tid=[5468]}, 88) = 5468 [pid 5468] <... rseq resumed>) = 0 [pid 5445] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] rt_sigprocmask(SIG_SETMASK, [], [pid 5436] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] set_robust_list(0x7f37740339a0, 24 [pid 5438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5437] <... futex resumed>) = 0 [pid 5436] <... futex resumed>) = 1 [pid 5468] <... set_robust_list resumed>) = 0 [pid 5438] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] symlink("./file1", "./bus" [pid 5468] rt_sigprocmask(SIG_SETMASK, [], [pid 5438] <... futex resumed>) = 0 [pid 5468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5438] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5468] memfd_create("syzkaller", 0) = 5 [pid 5468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5468] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5437] <... symlink resumed>) = -1 EEXIST (File exists) [ 79.646427][ T5437] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5467] <... write resumed>) = 2097152 [pid 5437] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5436] exit_group(0 [pid 5437] <... futex resumed>) = ? [pid 5436] <... exit_group resumed>) = ? [pid 5465] <... futex resumed>) = ? [pid 5465] +++ exited with 0 +++ [pid 5461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5467] munmap(0x7f376bc00000, 138412032 [pid 5437] +++ exited with 0 +++ [pid 5436] +++ exited with 0 +++ [pid 5468] <... write resumed>) = 2097152 [pid 5467] <... munmap resumed>) = 0 [pid 5468] munmap(0x7f376bc00000, 138412032 [pid 5467] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5436, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5467] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5467] close(5 [pid 5214] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5214] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5214] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5468] <... munmap resumed>) = 0 [pid 5468] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5442] <... fsconfig resumed>) = 0 [pid 5442] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5442] <... futex resumed>) = 0 [pid 5468] close(5 [pid 5442] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] <... close resumed>) = 0 [pid 5467] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5467] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = 0 [pid 5443] <... futex resumed>) = 1 [pid 5445] symlink("./file1", "./bus" [pid 5443] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5445] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5445] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5445] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] exit_group(0) = ? [pid 5468] <... close resumed>) = 0 [pid 5468] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5445] <... futex resumed>) = ? [pid 5467] <... futex resumed>) = ? [pid 5438] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] +++ exited with 0 +++ [pid 5438] <... futex resumed>) = 1 [pid 5468] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] <... futex resumed>) = 0 [pid 5442] symlink("./file1", "./bus" [pid 5467] +++ exited with 0 +++ [pid 5443] +++ exited with 0 +++ [pid 5438] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5443, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=34 /* 0.34 s */} --- [pid 5218] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5218] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [ 79.769286][ T5445] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 79.808268][ T5442] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5218] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5442] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5216] <... close resumed>) = 0 [pid 5442] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5442] <... futex resumed>) = 0 [pid 5438] exit_group(0 [pid 5442] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] <... exit_group resumed>) = ? [pid 5442] <... futex resumed>) = ? [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5469 ./strace-static-x86_64: Process 5469 attached [pid 5442] +++ exited with 0 +++ [pid 5469] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5469] chdir("./7") = 0 [pid 5469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5469] setpgid(0, 0) = 0 [pid 5468] <... futex resumed>) = ? [pid 5469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5468] +++ exited with 0 +++ [pid 5438] +++ exited with 0 +++ [pid 5469] write(3, "1000", 4) = 4 [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5438, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=50 /* 0.50 s */} --- [pid 5469] close(3 [pid 5217] restart_syscall(<... resuming interrupted clone ...> [pid 5469] <... close resumed>) = 0 [pid 5469] symlink("/dev/binderfs", "./binderfs" [pid 5217] <... restart_syscall resumed>) = 0 [pid 5217] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5469] <... symlink resumed>) = 0 executing program [pid 5469] write(1, "executing program\n", 18 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5469] <... write resumed>) = 18 [pid 5469] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] <... openat resumed>) = 3 [pid 5469] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5217] newfstatat(3, "", [pid 5469] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5469] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5469] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5217] getdents64(3, [pid 5469] <... mprotect resumed>) = 0 [pid 5469] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5217] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5469] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5217] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5470 attached [pid 5470] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5469] <... clone3 resumed> => {parent_tid=[5470]}, 88) = 5470 [pid 5214] <... umount2 resumed>) = 0 [pid 5469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5469] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] <... rseq resumed>) = 0 [pid 5469] <... futex resumed>) = 0 [pid 5470] set_robust_list(0x7f37740549a0, 24 [pid 5214] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5470] <... set_robust_list resumed>) = 0 [pid 5469] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5470] rt_sigprocmask(SIG_SETMASK, [], [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] newfstatat(AT_FDCWD, "./6/bus", [pid 5470] memfd_create("syzkaller", 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5470] <... memfd_create resumed>) = 3 [pid 5214] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5470] <... mmap resumed>) = 0x7f376bc00000 [pid 5214] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5214] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5214] close(4) = 0 [pid 5214] rmdir("./6/bus") = 0 [pid 5214] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] unlink("./6/binderfs") = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5214] close(3) = 0 [pid 5214] rmdir("./6") = 0 [pid 5214] mkdir("./7", 0777 [pid 5218] <... umount2 resumed>) = 0 [pid 5218] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... mkdir resumed>) = 0 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5218] newfstatat(AT_FDCWD, "./6/bus", [pid 5214] <... openat resumed>) = 3 [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] ioctl(3, LOOP_CLR_FD [pid 5218] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] <... ioctl resumed>) = 0 [pid 5218] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5214] close(3 [pid 5218] <... openat resumed>) = 4 [pid 5218] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./6/bus") = 0 [pid 5218] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] unlink("./6/binderfs") = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3) = 0 [pid 5218] rmdir("./6") = 0 [pid 5218] mkdir("./7", 0777) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5218] ioctl(3, LOOP_CLR_FD) = 0 [pid 5218] close(3 [pid 5217] <... umount2 resumed>) = 0 [pid 5217] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5217] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5217] close(4) = 0 [pid 5217] rmdir("./6/bus") = 0 [pid 5217] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] unlink("./6/binderfs") = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5217] close(3) = 0 [pid 5217] rmdir("./6") = 0 [pid 5217] mkdir("./7", 0777) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5217] ioctl(3, LOOP_CLR_FD) = 0 [pid 5217] close(3 [pid 5470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5214] <... close resumed>) = 0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5471 ./strace-static-x86_64: Process 5471 attached [pid 5471] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5471] chdir("./7") = 0 [pid 5471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5471] setpgid(0, 0) = 0 [pid 5471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5471] write(3, "1000", 4) = 4 [pid 5471] close(3) = 0 [pid 5471] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5471] write(1, "executing program\n", 18) = 18 [pid 5471] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5218] <... close resumed>) = 0 [pid 5471] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5471] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5471] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5472]}, 88) = 5472 [pid 5471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5471] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5472 attached [pid 5461] <... write resumed>) = 20699119 [pid 5472] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5472] set_robust_list(0x7f37740549a0, 24./strace-static-x86_64: Process 5473 attached ) = 0 [pid 5461] munmap(0x7f376bc00000, 138412032 [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5473 [pid 5472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5473] set_robust_list(0x55556d6356a0, 24 [pid 5472] memfd_create("syzkaller", 0 [pid 5473] <... set_robust_list resumed>) = 0 [pid 5472] <... memfd_create resumed>) = 3 [pid 5473] chdir("./7" [pid 5472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5473] <... chdir resumed>) = 0 [pid 5473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5473] setpgid(0, 0) = 0 [pid 5473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5473] write(3, "1000", 4) = 4 [pid 5473] close(3) = 0 [pid 5473] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5473] write(1, "executing program\n", 18) = 18 [pid 5473] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5473] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5473] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5473] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5473] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5474 attached => {parent_tid=[5474]}, 88) = 5474 [pid 5474] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5474] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5474] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5473] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5473] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5461] <... munmap resumed>) = 0 [pid 5474] <... futex resumed>) = 0 [pid 5474] memfd_create("syzkaller", 0) = 3 [pid 5474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5461] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5461] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5217] <... close resumed>) = 0 [pid 5461] close(3) = 0 [pid 5461] close(4) = 0 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5461] mkdir("./bus", 0777) = 0 ./strace-static-x86_64: Process 5475 attached [pid 5461] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5475 [pid 5475] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5475] chdir("./7") = 0 [pid 5475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5475] setpgid(0, 0) = 0 [ 80.498311][ T5461] loop1: detected capacity change from 0 to 40427 [ 80.534537][ T5461] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [pid 5475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5475] write(3, "1000", 4) = 4 [pid 5475] close(3) = 0 [pid 5475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5475] write(1, "executing program\n", 18executing program ) = 18 [pid 5475] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5475] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5479 attached [pid 5479] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5479] set_robust_list(0x7f37740549a0, 24 [pid 5475] <... clone3 resumed> => {parent_tid=[5479]}, 88) = 5479 [pid 5479] <... set_robust_list resumed>) = 0 [pid 5479] rt_sigprocmask(SIG_SETMASK, [], [pid 5475] rt_sigprocmask(SIG_SETMASK, [], [pid 5479] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5479] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [ 80.555230][ T5461] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 5479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] <... futex resumed>) = 0 [pid 5479] memfd_create("syzkaller", 0 [pid 5475] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5479] <... memfd_create resumed>) = 3 [pid 5479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 80.613689][ T5461] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5470] <... write resumed>) = 20699119 [pid 5470] munmap(0x7f376bc00000, 138412032) = 0 [pid 5470] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5470] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5470] close(3) = 0 [pid 5470] close(4) = 0 [pid 5472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5470] mkdir("./bus", 0777) = 0 [ 80.735507][ T5470] loop2: detected capacity change from 0 to 40427 [ 80.758892][ T5461] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 80.770628][ T5461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 5470] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5461] <... mount resumed>) = 0 [pid 5461] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5461] chdir("./bus") = 0 [ 80.778656][ T5470] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [pid 5461] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5461] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5455] <... futex resumed>) = 0 [pid 5455] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5455] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] mkdir("./bus", 000) = 0 [pid 5461] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... futex resumed>) = 0 [pid 5455] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5455] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... futex resumed>) = 1 [pid 5461] fspick(AT_FDCWD, ".", 0) = 4 [pid 5461] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... futex resumed>) = 0 [pid 5455] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5455] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... futex resumed>) = 1 [pid 5461] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5461] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5455] <... futex resumed>) = 0 [pid 5455] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5455] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 80.813862][ T5470] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 5461] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5455] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5455] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5455] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5455] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5455] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5483]}, 88) = 5483 [pid 5455] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5455] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5483 attached [pid 5483] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5483] set_robust_list(0x7f37740339a0, 24 [pid 5455] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5483] <... set_robust_list resumed>) = 0 [pid 5483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5483] memfd_create("syzkaller", 0) = 5 [pid 5483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 80.933794][ T5470] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 5483] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5461] <... fsconfig resumed>) = 0 [pid 5483] <... write resumed>) = 2097152 [pid 5461] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5483] munmap(0x7f376bc00000, 138412032) = 0 [pid 5483] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5483] close(5) = 0 [pid 5483] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... futex resumed>) = 0 [pid 5455] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] <... futex resumed>) = 0 [pid 5455] <... futex resumed>) = 1 [pid 5461] symlink("./file1", "./bus" [pid 5455] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5483] <... futex resumed>) = 1 [pid 5483] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5461] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5461] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5455] <... futex resumed>) = 0 [pid 5455] exit_group(0 [pid 5483] <... futex resumed>) = ? [pid 5455] <... exit_group resumed>) = ? [pid 5483] +++ exited with 0 +++ [pid 5461] +++ exited with 0 +++ [pid 5455] +++ exited with 0 +++ [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5455, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=36 /* 0.36 s */} --- [pid 5215] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5215] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5215] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [ 81.085056][ T5461] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 81.112002][ T5470] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 5215] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5470] <... mount resumed>) = 0 [pid 5470] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5470] chdir("./bus") = 0 [pid 5470] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5470] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] <... futex resumed>) = 0 [pid 5469] <... futex resumed>) = 1 [pid 5470] mkdir("./bus", 000 [ 81.128240][ T5470] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 5469] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5470] <... mkdir resumed>) = 0 [pid 5470] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5470] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] <... futex resumed>) = 0 [pid 5469] <... futex resumed>) = 1 [pid 5470] fspick(AT_FDCWD, ".", 0 [pid 5469] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5470] <... fspick resumed>) = 4 [pid 5470] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5469] <... futex resumed>) = 0 [pid 5470] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5470] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5472] <... write resumed>) = 20699119 [pid 5470] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] munmap(0x7f376bc00000, 138412032 [pid 5470] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5470] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5469] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5472] <... munmap resumed>) = 0 [pid 5472] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5472] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5472] close(3) = 0 [pid 5472] close(4) = 0 [pid 5469] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5472] mkdir("./bus", 0777) = 0 [pid 5469] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5469] <... futex resumed>) = 0 [pid 5469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5469] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5469] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5486 attached [pid 5486] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5469] <... clone3 resumed> => {parent_tid=[5486]}, 88) = 5486 [pid 5486] <... rseq resumed>) = 0 [pid 5469] rt_sigprocmask(SIG_SETMASK, [], [pid 5486] set_robust_list(0x7f37740339a0, 24 [pid 5469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5486] <... set_robust_list resumed>) = 0 [pid 5469] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] rt_sigprocmask(SIG_SETMASK, [], [pid 5469] <... futex resumed>) = 0 [pid 5486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5469] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5486] memfd_create("syzkaller", 0) = 5 [pid 5486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 81.240052][ T5472] loop0: detected capacity change from 0 to 40427 [ 81.255645][ T5472] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [pid 5474] <... write resumed>) = 20699119 [pid 5215] <... umount2 resumed>) = 0 [pid 5486] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5215] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./7/bus", [pid 5474] munmap(0x7f376bc00000, 138412032 [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 81.291741][ T5472] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 5215] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5215] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(4, [pid 5486] <... write resumed>) = 2097152 [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5486] munmap(0x7f376bc00000, 138412032 [pid 5215] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5215] close(4) = 0 [pid 5215] rmdir("./7/bus" [pid 5474] <... munmap resumed>) = 0 [pid 5215] <... rmdir resumed>) = 0 [pid 5474] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5215] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5486] <... munmap resumed>) = 0 [pid 5474] <... openat resumed>) = 4 [pid 5474] ioctl(4, LOOP_SET_FD, 3 [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5486] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5215] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5486] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5470] <... fsconfig resumed>) = 0 [pid 5215] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5486] close(5 [pid 5470] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] unlink("./7/binderfs" [pid 5470] <... futex resumed>) = 0 [pid 5470] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] <... unlink resumed>) = 0 [pid 5215] getdents64(3, [pid 5474] <... ioctl resumed>) = 0 [pid 5474] close(3) = 0 [pid 5474] close(4 [pid 5486] <... close resumed>) = 0 [pid 5474] <... close resumed>) = 0 [pid 5215] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5474] mkdir("./bus", 0777) = 0 [ 81.367372][ T5472] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.386770][ T5474] loop4: detected capacity change from 0 to 40427 [pid 5474] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5486] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] close(3 [pid 5469] <... futex resumed>) = 0 [pid 5486] <... futex resumed>) = 1 [pid 5469] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... close resumed>) = 0 [pid 5469] <... futex resumed>) = 1 [pid 5215] rmdir("./7" [pid 5470] <... futex resumed>) = 0 [pid 5486] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5470] symlink("./file1", "./bus" [pid 5469] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... rmdir resumed>) = 0 [pid 5215] mkdir("./8", 0777) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5470] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5215] <... openat resumed>) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD [pid 5470] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 81.423696][ T5474] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 81.434499][ T5470] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 81.452560][ T5472] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.456037][ T5474] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 5470] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] <... futex resumed>) = 0 [pid 5215] <... ioctl resumed>) = 0 [pid 5469] exit_group(0 [pid 5215] close(3 [pid 5486] <... futex resumed>) = ? [pid 5470] <... futex resumed>) = ? [pid 5469] <... exit_group resumed>) = ? [pid 5470] +++ exited with 0 +++ [pid 5486] +++ exited with 0 +++ [pid 5469] +++ exited with 0 +++ [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5469, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=40 /* 0.40 s */} --- [pid 5216] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5216] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5216] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 81.459703][ T5472] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 5472] <... mount resumed>) = 0 [pid 5216] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5216] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5472] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5472] chdir("./bus") = 0 [pid 5472] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5472] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5472] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5471] <... futex resumed>) = 0 [pid 5471] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] <... futex resumed>) = 0 [pid 5471] <... futex resumed>) = 1 [ 81.513696][ T5474] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 5471] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5472] mkdir("./bus", 000) = 0 [pid 5472] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5471] <... futex resumed>) = 0 [pid 5471] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5472] fspick(AT_FDCWD, ".", 0 [pid 5471] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5472] <... fspick resumed>) = 4 [pid 5472] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5472] <... futex resumed>) = 0 [pid 5472] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5471] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5472] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5471] <... futex resumed>) = 0 [pid 5472] <... fsconfig resumed>) = 0 [pid 5472] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5472] <... futex resumed>) = 0 [pid 5472] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5471] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5471] <... futex resumed>) = 0 [pid 5471] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5479] <... write resumed>) = 20699119 [pid 5479] munmap(0x7f376bc00000, 138412032 [pid 5471] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5471] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5471] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5471] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5471] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5494]}, 88) = 5494 [pid 5471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5471] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5494 attached [pid 5494] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5494] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5494] memfd_create("syzkaller", 0 [pid 5479] <... munmap resumed>) = 0 [pid 5494] <... memfd_create resumed>) = 5 [pid 5479] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5479] <... openat resumed>) = 4 [pid 5494] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5479] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5479] close(3) = 0 [pid 5479] close(4) = 0 [pid 5479] mkdir("./bus", 0777 [pid 5474] <... mount resumed>) = 0 [pid 5494] <... write resumed>) = 2097152 [pid 5479] <... mkdir resumed>) = 0 [pid 5474] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5494] munmap(0x7f376bc00000, 138412032) = 0 [pid 5474] chdir("./bus" [pid 5479] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5494] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5474] <... chdir resumed>) = 0 [pid 5494] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 81.688434][ T5479] loop3: detected capacity change from 0 to 40427 [ 81.697277][ T5474] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.717346][ T5474] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5474] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5474] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5473] <... futex resumed>) = 0 [pid 5473] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5494] close(5 [pid 5473] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5474] mkdir("./bus", 000) = 0 [pid 5474] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5473] <... futex resumed>) = 0 [pid 5474] fspick(AT_FDCWD, ".", 0 [pid 5473] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] <... fspick resumed>) = 4 [pid 5473] <... futex resumed>) = 0 [pid 5474] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5474] <... futex resumed>) = 0 [pid 5473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5474] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5473] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] <... fsconfig resumed>) = 0 [pid 5473] <... futex resumed>) = 0 [pid 5474] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5474] <... futex resumed>) = 0 [pid 5473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5474] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5473] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5473] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... close resumed>) = 0 [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5496 attached , child_tidptr=0x55556d635690) = 5496 [pid 5496] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5496] chdir("./8" [pid 5216] <... umount2 resumed>) = 0 [pid 5496] <... chdir resumed>) = 0 [pid 5216] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5472] <... fsconfig resumed>) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] setpgid(0, 0 [pid 5494] <... close resumed>) = 0 [pid 5216] newfstatat(AT_FDCWD, "./7/bus", [pid 5496] <... setpgid resumed>) = 0 [pid 5472] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5472] <... futex resumed>) = 0 [pid 5472] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5494] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5496] <... openat resumed>) = 3 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] write(3, "1000", 4 [pid 5216] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5496] <... write resumed>) = 4 [pid 5216] <... openat resumed>) = 4 [ 81.752242][ T5479] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.760147][ T5479] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 5496] close(3 [pid 5216] newfstatat(4, "", [pid 5496] <... close resumed>) = 0 [pid 5496] symlink("/dev/binderfs", "./binderfs" [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5496] <... symlink resumed>) = 0 [pid 5494] <... futex resumed>) = 1 [pid 5471] <... futex resumed>) = 0 [pid 5216] getdents64(4, [pid 5471] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] <... futex resumed>) = 0 [pid 5471] <... futex resumed>) = 1 [pid 5472] symlink("./file1", "./bus"executing program [pid 5471] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5496] write(1, "executing program\n", 18 [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5496] <... write resumed>) = 18 [pid 5494] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5473] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5496] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5473] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] getdents64(4, [pid 5496] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5496] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5216] close(4 [pid 5496] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5473] <... futex resumed>) = 0 [pid 5216] <... close resumed>) = 0 [pid 5496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] rmdir("./7/bus" [pid 5496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5216] <... rmdir resumed>) = 0 [pid 5496] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5473] <... mmap resumed>) = 0x7f3774013000 [pid 5216] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5496] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5473] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5216] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5500 attached [pid 5473] <... mprotect resumed>) = 0 [pid 5216] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5500] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5496] <... clone3 resumed> => {parent_tid=[5500]}, 88) = 5500 [pid 5216] unlink("./7/binderfs" [pid 5500] <... rseq resumed>) = 0 [pid 5496] rt_sigprocmask(SIG_SETMASK, [], [pid 5473] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5500] set_robust_list(0x7f37740549a0, 24 [pid 5496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] <... unlink resumed>) = 0 [pid 5500] <... set_robust_list resumed>) = 0 [pid 5496] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] getdents64(3, [pid 5500] rt_sigprocmask(SIG_SETMASK, [], [pid 5496] <... futex resumed>) = 0 [pid 5216] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5500] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5496] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5216] close(3 [pid 5500] memfd_create("syzkaller", 0 [pid 5473] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5216] <... close resumed>) = 0 [pid 5473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5500] <... memfd_create resumed>) = 3 [pid 5216] rmdir("./7" [pid 5500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5473] <... clone3 resumed> => {parent_tid=[5501]}, 88) = 5501 [pid 5216] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5501 attached [pid 5500] <... mmap resumed>) = 0x7f376bc00000 [pid 5473] rt_sigprocmask(SIG_SETMASK, [], [pid 5216] mkdir("./8", 0777 [pid 5473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5473] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5473] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5216] <... mkdir resumed>) = 0 [pid 5501] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5472] <... symlink resumed>) = -1 EEXIST (File exists) [ 81.809996][ T5479] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.813279][ T5472] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5472] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5471] <... futex resumed>) = 0 [pid 5501] <... rseq resumed>) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5501] set_robust_list(0x7f37740339a0, 24 [pid 5471] exit_group(0 [pid 5501] <... set_robust_list resumed>) = 0 [pid 5494] <... futex resumed>) = ? [pid 5471] <... exit_group resumed>) = ? [pid 5216] <... openat resumed>) = 3 [pid 5501] rt_sigprocmask(SIG_SETMASK, [], [pid 5494] +++ exited with 0 +++ [pid 5216] ioctl(3, LOOP_CLR_FD [pid 5501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] <... ioctl resumed>) = 0 [pid 5501] memfd_create("syzkaller", 0 [pid 5216] close(3 [pid 5501] <... memfd_create resumed>) = 5 [pid 5472] +++ exited with 0 +++ [pid 5471] +++ exited with 0 +++ [pid 5501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5471, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=45 /* 0.45 s */} --- [pid 5214] restart_syscall(<... resuming interrupted clone ...> [pid 5501] <... mmap resumed>) = 0x7f376bc00000 [pid 5214] <... restart_syscall resumed>) = 0 [pid 5214] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5214] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5214] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5474] <... fsconfig resumed>) = 0 [pid 5474] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5474] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5501] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5479] <... mount resumed>) = 0 [pid 5479] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5501] <... write resumed>) = 2097152 [pid 5479] chdir("./bus") = 0 [pid 5479] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5479] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5479] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] <... futex resumed>) = 0 [pid 5475] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] <... futex resumed>) = 0 [pid 5475] <... futex resumed>) = 1 [pid 5479] mkdir("./bus", 000 [pid 5475] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5479] <... mkdir resumed>) = 0 [pid 5501] munmap(0x7f376bc00000, 138412032 [pid 5479] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 81.935067][ T5479] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.957923][ T5479] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 5479] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] <... futex resumed>) = 0 [pid 5501] <... munmap resumed>) = 0 [pid 5475] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] <... futex resumed>) = 0 [pid 5475] <... futex resumed>) = 1 [pid 5479] fspick(AT_FDCWD, ".", 0 [pid 5501] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5479] <... fspick resumed>) = 4 [pid 5475] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5479] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5501] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5479] <... futex resumed>) = 0 [pid 5501] close(5 [pid 5475] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5475] <... futex resumed>) = 0 [pid 5479] <... fsconfig resumed>) = 0 [pid 5479] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5479] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5475] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] <... futex resumed>) = 0 [pid 5475] <... futex resumed>) = 1 [pid 5479] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5501] <... close resumed>) = 0 [pid 5475] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5501] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5473] <... futex resumed>) = 0 [pid 5501] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5473] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] <... futex resumed>) = 0 [pid 5473] <... futex resumed>) = 1 [pid 5474] symlink("./file1", "./bus" [pid 5473] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... umount2 resumed>) = 0 [pid 5474] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5474] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5473] <... futex resumed>) = 0 [pid 5473] exit_group(0) = ? [pid 5474] +++ exited with 0 +++ [pid 5214] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(AT_FDCWD, "./7/bus", [pid 5501] <... futex resumed>) = ? [pid 5475] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5475] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5214] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(4, [pid 5501] +++ exited with 0 +++ [pid 5475] <... futex resumed>) = 0 [pid 5473] +++ exited with 0 +++ [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] getdents64(4, [pid 5475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5473, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=43 /* 0.43 s */} --- [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5475] <... mmap resumed>) = 0x7f3774013000 [pid 5218] restart_syscall(<... resuming interrupted clone ...> [pid 5475] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5214] close(4) = 0 [pid 5475] <... mprotect resumed>) = 0 [pid 5214] rmdir("./7/bus" [pid 5475] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5214] <... rmdir resumed>) = 0 [pid 5475] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5214] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5503 attached ) = -1 EINVAL (Invalid argument) [pid 5475] <... clone3 resumed> => {parent_tid=[5503]}, 88) = 5503 [pid 5503] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [ 82.056981][ T5474] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5475] rt_sigprocmask(SIG_SETMASK, [], [pid 5503] <... rseq resumed>) = 0 [pid 5475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5503] set_robust_list(0x7f37740339a0, 24 [pid 5475] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... set_robust_list resumed>) = 0 [pid 5475] <... futex resumed>) = 0 [pid 5503] rt_sigprocmask(SIG_SETMASK, [], [pid 5475] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] unlink("./7/binderfs") = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5214] close(3) = 0 [pid 5214] rmdir("./7") = 0 [pid 5214] mkdir("./8", 0777) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5218] <... restart_syscall resumed>) = 0 [pid 5214] ioctl(3, LOOP_CLR_FD) = 0 [pid 5214] close(3 [pid 5503] memfd_create("syzkaller", 0 [pid 5218] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5503] <... memfd_create resumed>) = 5 [pid 5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5218] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5503] <... mmap resumed>) = 0x7f376bc00000 [pid 5218] <... openat resumed>) = 3 [pid 5218] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5218] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5503] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5479] <... fsconfig resumed>) = 0 [pid 5503] <... write resumed>) = 2097152 [pid 5216] <... close resumed>) = 0 [pid 5503] munmap(0x7f376bc00000, 138412032 [pid 5479] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5504 attached [pid 5503] <... munmap resumed>) = 0 [pid 5479] <... futex resumed>) = 0 [pid 5479] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5504 [pid 5504] set_robust_list(0x55556d6356a0, 24 [pid 5503] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5504] <... set_robust_list resumed>) = 0 [pid 5503] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5504] chdir("./8" [pid 5503] close(5 [pid 5504] <... chdir resumed>) = 0 [pid 5504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5504] setpgid(0, 0) = 0 [pid 5504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5503] <... close resumed>) = 0 [pid 5504] write(3, "1000", 4) = 4 [pid 5504] close(3) = 0 [pid 5503] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5504] symlink("/dev/binderfs", "./binderfs" [pid 5475] <... futex resumed>) = 0 [pid 5503] <... futex resumed>) = 1 [pid 5475] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5479] <... futex resumed>) = 0 [pid 5475] <... futex resumed>) = 1 [pid 5479] symlink("./file1", "./bus" [pid 5475] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} executing program [pid 5504] <... symlink resumed>) = 0 [pid 5504] write(1, "executing program\n", 18 [pid 5479] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5504] <... write resumed>) = 18 [pid 5479] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5504] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = 0 [pid 5504] <... futex resumed>) = 0 [pid 5479] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] exit_group(0 [pid 5504] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5503] <... futex resumed>) = ? [pid 5479] <... futex resumed>) = ? [pid 5475] <... exit_group resumed>) = ? [pid 5503] +++ exited with 0 +++ [pid 5479] +++ exited with 0 +++ [pid 5475] +++ exited with 0 +++ [pid 5504] <... rt_sigaction resumed>NULL, 8) = 0 [ 82.309313][ T5479] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5504] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5475, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=44 /* 0.44 s */} --- [pid 5504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5217] restart_syscall(<... resuming interrupted clone ...> [pid 5504] <... mmap resumed>) = 0x7f3774034000 [pid 5504] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5217] <... restart_syscall resumed>) = 0 [pid 5504] <... clone3 resumed> => {parent_tid=[5505]}, 88) = 5505 [pid 5217] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5504] rt_sigprocmask(SIG_SETMASK, [], [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5217] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5504] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] <... openat resumed>) = 3 [pid 5504] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5217] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5505 attached [pid 5505] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5217] getdents64(3, [pid 5505] set_robust_list(0x7f37740549a0, 24 [pid 5217] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5505] <... set_robust_list resumed>) = 0 [pid 5505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5505] memfd_create("syzkaller", 0 [pid 5218] <... umount2 resumed>) = 0 [pid 5217] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5505] <... memfd_create resumed>) = 3 [pid 5505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5505] <... mmap resumed>) = 0x7f376bc00000 [pid 5218] newfstatat(AT_FDCWD, "./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5218] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./7/bus") = 0 [pid 5218] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] <... close resumed>) = 0 [pid 5218] unlink("./7/binderfs") = 0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5218] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3) = 0 [pid 5218] rmdir("./7") = 0 [pid 5218] mkdir("./8", 0777) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 ./strace-static-x86_64: Process 5506 attached [pid 5218] ioctl(3, LOOP_CLR_FD) = 0 [pid 5218] close(3 [pid 5506] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5214] <... clone resumed>, child_tidptr=0x55556d635690) = 5506 [pid 5506] chdir("./8") = 0 [pid 5506] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5506] setpgid(0, 0) = 0 [pid 5506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5506] write(3, "1000", 4) = 4 [pid 5217] <... umount2 resumed>) = 0 [pid 5506] close(3 [pid 5217] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5506] <... close resumed>) = 0 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5506] symlink("/dev/binderfs", "./binderfs" [pid 5217] newfstatat(AT_FDCWD, "./7/bus", [pid 5506] <... symlink resumed>) = 0 [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5506] write(1, "executing program\n", 18 [pid 5217] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5506] <... write resumed>) = 18 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5506] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5506] <... futex resumed>) = 0 [pid 5506] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5217] <... openat resumed>) = 4 [pid 5506] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5217] newfstatat(4, "", [pid 5506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5217] getdents64(4, [pid 5506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5506] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5217] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5506] <... mprotect resumed>) = 0 [pid 5217] getdents64(4, [pid 5506] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5217] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5506] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5217] close(4 [pid 5506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5217] <... close resumed>) = 0 ./strace-static-x86_64: Process 5507 attached [pid 5217] rmdir("./7/bus" [pid 5507] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5506] <... clone3 resumed> => {parent_tid=[5507]}, 88) = 5507 [pid 5217] <... rmdir resumed>) = 0 [pid 5507] <... rseq resumed>) = 0 [pid 5506] rt_sigprocmask(SIG_SETMASK, [], [pid 5217] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5507] set_robust_list(0x7f37740549a0, 24 [pid 5506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5507] <... set_robust_list resumed>) = 0 [pid 5506] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5507] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5506] <... futex resumed>) = 0 [pid 5217] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5506] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5217] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] unlink("./7/binderfs" [pid 5507] memfd_create("syzkaller", 0) = 3 [pid 5217] <... unlink resumed>) = 0 [pid 5507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5217] getdents64(3, [pid 5507] <... mmap resumed>) = 0x7f376bc00000 [pid 5217] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5217] close(3) = 0 [pid 5217] rmdir("./7") = 0 [pid 5217] mkdir("./8", 0777) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5217] ioctl(3, LOOP_CLR_FD [pid 5500] <... write resumed>) = 20699119 [pid 5217] <... ioctl resumed>) = 0 [pid 5217] close(3 [pid 5500] munmap(0x7f376bc00000, 138412032 [pid 5505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5500] <... munmap resumed>) = 0 [pid 5500] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5500] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5500] close(3) = 0 [pid 5500] close(4) = 0 [pid 5500] mkdir("./bus", 0777) = 0 [pid 5500] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5218] <... close resumed>) = 0 [ 82.708077][ T5500] loop1: detected capacity change from 0 to 40427 [ 82.745088][ T5500] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5508 attached [pid 5508] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5508] chdir("./8") = 0 [pid 5508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5508] setpgid(0, 0) = 0 [pid 5508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5508] write(3, "1000", 4) = 4 [pid 5508] close(3) = 0 [pid 5508] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5508] write(1, "executing program\n", 18) = 18 [pid 5508] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5508] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5508] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5508 [pid 5508] <... mprotect resumed>) = 0 [pid 5508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5509 attached [pid 5509] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5508] <... clone3 resumed> => {parent_tid=[5509]}, 88) = 5509 [pid 5509] <... rseq resumed>) = 0 [pid 5508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5508] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] set_robust_list(0x7f37740549a0, 24 [pid 5508] <... futex resumed>) = 0 [pid 5509] <... set_robust_list resumed>) = 0 [pid 5508] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 82.768021][ T5500] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 5509] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5509] memfd_create("syzkaller", 0) = 3 [pid 5509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 82.858056][ T5500] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5500] <... mount resumed>) = 0 [pid 5500] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5500] chdir("./bus") = 0 [pid 5500] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5500] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5496] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] mkdir("./bus", 000) = 0 [pid 5500] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5500] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5496] <... futex resumed>) = 0 [pid 5496] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] fspick(AT_FDCWD, ".", 0) = 4 [pid 5500] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5496] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5500] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [ 82.981468][ T5500] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.997972][ T5500] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 5500] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5496] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... close resumed>) = 0 [pid 5500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5496] <... futex resumed>) = 0 [pid 5496] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5514 attached [pid 5514] set_robust_list(0x55556d6356a0, 24 [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5514 [pid 5514] <... set_robust_list resumed>) = 0 [pid 5514] chdir("./8") = 0 [pid 5514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5514] setpgid(0, 0) = 0 [pid 5514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5496] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5514] <... openat resumed>) = 3 [pid 5496] <... mmap resumed>) = 0x7f3774013000 [pid 5496] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5514] write(3, "1000", 4 [pid 5496] <... mprotect resumed>) = 0 [pid 5496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5515]}, 88) = 5515 ./strace-static-x86_64: Process 5515 attached [pid 5514] <... write resumed>) = 4 [pid 5496] rt_sigprocmask(SIG_SETMASK, [], [pid 5515] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5514] close(3 [pid 5496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5514] <... close resumed>) = 0 [pid 5496] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] symlink("/dev/binderfs", "./binderfs" [pid 5496] <... futex resumed>) = 0 [pid 5515] <... rseq resumed>) = 0 [pid 5496] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5515] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5514] <... symlink resumed>) = 0 [pid 5514] write(1, "executing program\n", 18 [pid 5515] rt_sigprocmask(SIG_SETMASK, [], executing program NULL, 8) = 0 [pid 5514] <... write resumed>) = 18 [pid 5515] memfd_create("syzkaller", 0 [pid 5514] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5515] <... memfd_create resumed>) = 5 [pid 5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5514] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5514] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5514] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5514] <... mprotect resumed>) = 0 [pid 5514] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5515] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5514] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5516]}, 88) = 5516 ./strace-static-x86_64: Process 5516 attached [pid 5516] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5516] <... rseq resumed>) = 0 [pid 5516] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5514] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] memfd_create("syzkaller", 0 [pid 5514] <... futex resumed>) = 0 [pid 5516] <... memfd_create resumed>) = 3 [pid 5514] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5505] <... write resumed>) = 20699119 [pid 5516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5505] munmap(0x7f376bc00000, 138412032 [pid 5515] <... write resumed>) = 2097152 [pid 5515] munmap(0x7f376bc00000, 138412032) = 0 [pid 5505] <... munmap resumed>) = 0 [pid 5500] <... fsconfig resumed>) = 0 [pid 5500] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5500] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5515] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5505] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5515] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5505] <... openat resumed>) = 4 [pid 5515] close(5 [pid 5505] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5505] close(3) = 0 [pid 5505] close(4) = 0 [pid 5505] mkdir("./bus", 0777) = 0 [pid 5515] <... close resumed>) = 0 [ 83.233267][ T5505] loop2: detected capacity change from 0 to 40427 [ 83.270003][ T5505] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [pid 5505] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5515] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5496] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5500] <... futex resumed>) = 0 [pid 5496] <... futex resumed>) = 1 [pid 5500] symlink("./file1", "./bus" [pid 5496] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... symlink resumed>) = -1 EEXIST (File exists) [ 83.277781][ T5505] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.301330][ T5500] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5500] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5496] <... futex resumed>) = 0 [pid 5496] exit_group(0 [pid 5515] <... futex resumed>) = ? [pid 5496] <... exit_group resumed>) = ? [pid 5515] +++ exited with 0 +++ [pid 5500] +++ exited with 0 +++ [pid 5496] +++ exited with 0 +++ [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5496, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=41 /* 0.41 s */} --- [pid 5215] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5215] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [ 83.331946][ T5505] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 5215] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5507] <... write resumed>) = 20699119 [pid 5507] munmap(0x7f376bc00000, 138412032) = 0 [pid 5516] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5507] ioctl(4, LOOP_SET_FD, 3 [pid 5215] <... umount2 resumed>) = 0 [pid 5507] <... ioctl resumed>) = 0 [pid 5505] <... mount resumed>) = 0 [pid 5507] close(3 [pid 5505] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5215] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5507] <... close resumed>) = 0 [pid 5505] <... openat resumed>) = 3 [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5505] chdir("./bus" [pid 5215] newfstatat(AT_FDCWD, "./8/bus", [pid 5505] <... chdir resumed>) = 0 [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5505] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5215] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5505] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5505] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5505] <... futex resumed>) = 1 [pid 5504] <... futex resumed>) = 0 [pid 5215] <... openat resumed>) = 4 [pid 5507] close(4 [pid 5505] mkdir("./bus", 000 [pid 5504] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] newfstatat(4, "", [pid 5507] <... close resumed>) = 0 [pid 5504] <... futex resumed>) = 0 [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5507] mkdir("./bus", 0777 [pid 5504] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] getdents64(4, [pid 5507] <... mkdir resumed>) = 0 [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5505] <... mkdir resumed>) = 0 [pid 5215] getdents64(4, [pid 5505] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5507] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5215] close(4 [pid 5505] <... futex resumed>) = 1 [ 83.505703][ T5505] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.511732][ T5507] loop0: detected capacity change from 0 to 40427 [ 83.520208][ T5505] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.541001][ T5507] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [pid 5504] <... futex resumed>) = 0 [pid 5215] <... close resumed>) = 0 [pid 5505] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5504] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] rmdir("./8/bus" [pid 5505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5504] <... futex resumed>) = 0 [pid 5505] fspick(AT_FDCWD, ".", 0 [pid 5504] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... rmdir resumed>) = 0 [pid 5505] <... fspick resumed>) = 4 [pid 5215] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5505] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5504] <... futex resumed>) = 0 [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5505] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5504] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5504] <... futex resumed>) = 0 [pid 5504] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5505] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5215] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5505] <... fsconfig resumed>) = 0 [pid 5215] unlink("./8/binderfs" [pid 5505] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... unlink resumed>) = 0 [pid 5505] <... futex resumed>) = 1 [pid 5504] <... futex resumed>) = 0 [pid 5215] getdents64(3, [pid 5505] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5504] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5504] <... futex resumed>) = 0 [pid 5215] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5505] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5504] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] close(3) = 0 [pid 5215] rmdir("./8") = 0 [pid 5215] mkdir("./9", 0777) = 0 [ 83.549021][ T5507] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [pid 5215] close(3 [pid 5504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5504] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5504] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5524]}, 88) = 5524 [pid 5504] rt_sigprocmask(SIG_SETMASK, [], [pid 5509] <... write resumed>) = 20699119 ./strace-static-x86_64: Process 5524 attached [pid 5524] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5524] set_robust_list(0x7f37740339a0, 24) = 0 [ 83.598336][ T5507] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 5504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5504] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5504] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5524] rt_sigprocmask(SIG_SETMASK, [], [pid 5509] munmap(0x7f376bc00000, 138412032 [pid 5524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5524] memfd_create("syzkaller", 0) = 5 [pid 5524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5509] <... munmap resumed>) = 0 [pid 5509] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5509] ioctl(4, LOOP_SET_FD, 3 [pid 5524] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5509] <... ioctl resumed>) = 0 [pid 5509] close(3) = 0 [pid 5509] close(4) = 0 [pid 5509] mkdir("./bus", 0777) = 0 [ 83.710206][ T5509] loop4: detected capacity change from 0 to 40427 [ 83.746802][ T5509] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [pid 5509] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5524] <... write resumed>) = 2097152 [pid 5524] munmap(0x7f376bc00000, 138412032) = 0 [pid 5524] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5505] <... fsconfig resumed>) = 0 [pid 5524] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5524] close(5 [pid 5505] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 83.776873][ T5509] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.807681][ T5509] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 5505] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5524] <... close resumed>) = 0 [pid 5524] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5504] <... futex resumed>) = 0 [pid 5524] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5504] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5505] <... futex resumed>) = 0 [pid 5504] <... futex resumed>) = 1 [pid 5504] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5505] symlink("./file1", "./bus" [pid 5507] <... mount resumed>) = 0 [pid 5507] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5505] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5507] <... openat resumed>) = 3 [pid 5505] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5507] chdir("./bus" [pid 5505] <... futex resumed>) = 1 [pid 5504] <... futex resumed>) = 0 [pid 5507] <... chdir resumed>) = 0 [pid 5505] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5507] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5504] exit_group(0 [pid 5524] <... futex resumed>) = ? [pid 5505] <... futex resumed>) = ? [pid 5504] <... exit_group resumed>) = ? [pid 5524] +++ exited with 0 +++ [pid 5507] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5505] +++ exited with 0 +++ [pid 5504] +++ exited with 0 +++ [pid 5507] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5504, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=52 /* 0.52 s */} --- [pid 5507] <... futex resumed>) = 1 [pid 5506] <... futex resumed>) = 0 [pid 5216] restart_syscall(<... resuming interrupted clone ...> [pid 5507] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5506] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5506] <... futex resumed>) = 0 [pid 5216] <... restart_syscall resumed>) = 0 [pid 5507] mkdir("./bus", 000 [ 83.828537][ T5507] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 83.835747][ T5507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.868606][ T5505] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5506] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5507] <... mkdir resumed>) = 0 [pid 5507] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... openat resumed>) = 3 [pid 5507] <... futex resumed>) = 1 [pid 5506] <... futex resumed>) = 0 [pid 5216] newfstatat(3, "", [pid 5506] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5507] fspick(AT_FDCWD, ".", 0 [pid 5216] getdents64(3, [pid 5507] <... fspick resumed>) = 4 [pid 5506] <... futex resumed>) = 0 [pid 5507] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5506] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5507] <... futex resumed>) = 0 [pid 5506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5507] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5506] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5506] <... futex resumed>) = 0 [pid 5506] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5507] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5507] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5506] <... futex resumed>) = 0 [pid 5507] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5506] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5507] <... futex resumed>) = 0 [pid 5507] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5506] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... close resumed>) = 0 [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5529 attached [pid 5529] set_robust_list(0x55556d6356a0, 24 [pid 5215] <... clone resumed>, child_tidptr=0x55556d635690) = 5529 [pid 5529] <... set_robust_list resumed>) = 0 [pid 5529] chdir("./9") = 0 [pid 5529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5529] setpgid(0, 0) = 0 [pid 5529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5529] write(3, "1000", 4) = 4 [pid 5529] close(3) = 0 [pid 5529] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5529] write(1, "executing program\n", 18) = 18 [pid 5529] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5529] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5529] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5529] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5529] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5530]}, 88) = 5530 [pid 5529] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5529] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5530 attached [pid 5529] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5530] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5530] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5530] rt_sigprocmask(SIG_SETMASK, [], [pid 5506] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5506] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5506] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5532]}, 88) = 5532 [pid 5506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5506] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5506] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5532 attached [pid 5530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5530] memfd_create("syzkaller", 0 [pid 5532] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5530] <... memfd_create resumed>) = 3 [pid 5532] set_robust_list(0x7f37740339a0, 24 [pid 5530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5532] <... set_robust_list resumed>) = 0 [pid 5532] rt_sigprocmask(SIG_SETMASK, [], [pid 5530] <... mmap resumed>) = 0x7f376bc00000 [pid 5532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5509] <... mount resumed>) = 0 [pid 5532] memfd_create("syzkaller", 0 [pid 5509] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5532] <... memfd_create resumed>) = 5 [pid 5509] <... openat resumed>) = 3 [pid 5532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5509] chdir("./bus" [pid 5532] <... mmap resumed>) = 0x7f376bc00000 [pid 5509] <... chdir resumed>) = 0 [pid 5509] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5509] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5509] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] <... futex resumed>) = 0 [pid 5509] mkdir("./bus", 000 [pid 5508] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5507] <... fsconfig resumed>) = 0 [pid 5507] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 83.973111][ T5509] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 84.000063][ T5509] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5507] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5532] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5509] <... mkdir resumed>) = 0 [pid 5509] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5509] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] <... futex resumed>) = 0 [pid 5509] fspick(AT_FDCWD, ".", 0 [pid 5508] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5509] <... fspick resumed>) = 4 [pid 5509] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5509] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5509] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5216] <... umount2 resumed>) = 0 [pid 5509] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5509] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5508] <... futex resumed>) = 0 [pid 5509] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5508] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5216] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5216] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5216] close(4) = 0 [pid 5216] rmdir("./8/bus" [pid 5532] <... write resumed>) = 2097152 [pid 5216] <... rmdir resumed>) = 0 [pid 5532] munmap(0x7f376bc00000, 138412032 [pid 5216] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5532] <... munmap resumed>) = 0 [pid 5216] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5532] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5216] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5532] close(5 [pid 5216] unlink("./8/binderfs") = 0 [pid 5216] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5216] close(3) = 0 [pid 5216] rmdir("./8" [pid 5532] <... close resumed>) = 0 [pid 5516] <... write resumed>) = 20699119 [pid 5216] <... rmdir resumed>) = 0 [pid 5532] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] munmap(0x7f376bc00000, 138412032 [pid 5216] mkdir("./9", 0777 [pid 5532] <... futex resumed>) = 1 [pid 5506] <... futex resumed>) = 0 [pid 5216] <... mkdir resumed>) = 0 [pid 5506] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5507] <... futex resumed>) = 0 [pid 5506] <... futex resumed>) = 1 [pid 5216] ioctl(3, LOOP_CLR_FD [pid 5508] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5507] symlink("./file1", "./bus" [pid 5506] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... ioctl resumed>) = 0 [pid 5532] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] <... futex resumed>) = 0 [pid 5216] close(3 [pid 5516] <... munmap resumed>) = 0 [pid 5508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5507] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5508] <... mmap resumed>) = 0x7f3774013000 [pid 5507] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5508] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5507] <... futex resumed>) = 1 [pid 5506] <... futex resumed>) = 0 [pid 5516] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5508] <... mprotect resumed>) = 0 [pid 5507] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5506] exit_group(0 [pid 5532] <... futex resumed>) = ? [pid 5507] <... futex resumed>) = ? [pid 5506] <... exit_group resumed>) = ? [pid 5508] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5507] +++ exited with 0 +++ [pid 5508] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5532] +++ exited with 0 +++ [pid 5516] <... openat resumed>) = 4 [pid 5508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5506] +++ exited with 0 +++ [ 84.144166][ T5507] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5516] ioctl(4, LOOP_SET_FD, 3 [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5506, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5214] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5214] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5533 attached [pid 5516] <... ioctl resumed>) = 0 [pid 5508] <... clone3 resumed> => {parent_tid=[5533]}, 88) = 5533 [pid 5214] newfstatat(3, "", [pid 5533] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5516] close(3 [pid 5508] rt_sigprocmask(SIG_SETMASK, [], [pid 5533] <... rseq resumed>) = 0 [pid 5516] <... close resumed>) = 0 [pid 5508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5533] set_robust_list(0x7f37740339a0, 24 [pid 5516] close(4 [pid 5508] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5533] <... set_robust_list resumed>) = 0 [pid 5516] <... close resumed>) = 0 [pid 5508] <... futex resumed>) = 0 [pid 5533] rt_sigprocmask(SIG_SETMASK, [], [pid 5516] mkdir("./bus", 0777 [pid 5508] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5516] <... mkdir resumed>) = 0 [pid 5533] memfd_create("syzkaller", 0 [pid 5516] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5214] getdents64(3, [pid 5533] <... memfd_create resumed>) = 5 [pid 5533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5533] <... mmap resumed>) = 0x7f376bc00000 [pid 5214] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [ 84.194751][ T5516] loop3: detected capacity change from 0 to 40427 [ 84.205910][ T5516] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [pid 5533] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5509] <... fsconfig resumed>) = 0 [pid 5509] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5533] <... write resumed>) = 2097152 [ 84.241630][ T5516] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 5533] munmap(0x7f376bc00000, 138412032) = 0 [pid 5533] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [ 84.285940][ T5516] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 5533] close(5) = 0 [pid 5533] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5533] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5508] <... futex resumed>) = 1 [pid 5509] symlink("./file1", "./bus" [pid 5508] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5509] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5509] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5508] <... futex resumed>) = 0 [pid 5509] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5508] exit_group(0 [pid 5533] <... futex resumed>) = ? [pid 5509] <... futex resumed>) = ? [pid 5508] <... exit_group resumed>) = ? [pid 5533] +++ exited with 0 +++ [pid 5509] +++ exited with 0 +++ [pid 5508] +++ exited with 0 +++ [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5508, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=41 /* 0.41 s */} --- [pid 5218] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 84.351789][ T5509] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5218] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5218] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... umount2 resumed>) = 0 [pid 5516] <... mount resumed>) = 0 [pid 5214] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5516] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5516] <... openat resumed>) = 3 [pid 5214] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5516] chdir("./bus" [pid 5214] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5516] <... chdir resumed>) = 0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5516] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5214] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5516] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5516] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... openat resumed>) = 4 [pid 5516] <... futex resumed>) = 1 [pid 5514] <... futex resumed>) = 0 [pid 5214] newfstatat(4, "", [pid 5516] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5514] <... futex resumed>) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5516] mkdir("./bus", 000 [pid 5514] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] getdents64(4, [pid 5516] <... mkdir resumed>) = 0 [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5516] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] close(4 [pid 5516] <... futex resumed>) = 1 [pid 5214] <... close resumed>) = 0 [pid 5516] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] rmdir("./8/bus" [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5514] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5516] <... futex resumed>) = 0 [pid 5214] <... rmdir resumed>) = 0 [pid 5516] fspick(AT_FDCWD, ".", 0 [pid 5214] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5516] <... fspick resumed>) = 4 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5516] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5516] <... futex resumed>) = 1 [pid 5514] <... futex resumed>) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5516] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] unlink("./8/binderfs" [pid 5516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5516] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5214] <... unlink resumed>) = 0 [pid 5516] <... fsconfig resumed>) = 0 [pid 5214] getdents64(3, [pid 5516] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5514] <... futex resumed>) = 0 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5516] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] close(3 [pid 5514] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... close resumed>) = 0 [pid 5516] <... futex resumed>) = 0 [pid 5514] <... futex resumed>) = 1 [pid 5214] rmdir("./8" [pid 5516] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [ 84.414549][ T5516] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.423071][ T5516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 5514] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... rmdir resumed>) = 0 [pid 5214] mkdir("./9", 0777) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5214] ioctl(3, LOOP_CLR_FD) = 0 [pid 5214] close(3 [pid 5514] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5514] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5514] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5514] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5216] <... close resumed>) = 0 [pid 5514] <... mprotect resumed>) = 0 [pid 5514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5538 attached [pid 5538] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5514] <... clone3 resumed> => {parent_tid=[5538]}, 88) = 5538 [pid 5538] <... rseq resumed>) = 0 [pid 5514] rt_sigprocmask(SIG_SETMASK, [], [pid 5538] set_robust_list(0x7f37740339a0, 24 [pid 5514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5538] <... set_robust_list resumed>) = 0 [pid 5514] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5538] rt_sigprocmask(SIG_SETMASK, [], [pid 5514] <... futex resumed>) = 0 [pid 5538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5514] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5538] memfd_create("syzkaller", 0) = 5 [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5539 ./strace-static-x86_64: Process 5539 attached [pid 5538] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5539] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5539] chdir("./9") = 0 [pid 5539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5539] setpgid(0, 0) = 0 [pid 5539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5538] <... write resumed>) = 2097152 [pid 5539] write(3, "1000", 4) = 4 [pid 5539] close(3) = 0 [pid 5539] symlink("/dev/binderfs", "./binderfs" [pid 5538] munmap(0x7f376bc00000, 138412032 [pid 5539] <... symlink resumed>) = 0 executing program [pid 5539] write(1, "executing program\n", 18 [pid 5538] <... munmap resumed>) = 0 [pid 5539] <... write resumed>) = 18 [pid 5539] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5538] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5539] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5538] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5539] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5539] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5538] close(5 [pid 5539] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5218] <... umount2 resumed>) = 0 [pid 5218] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5218] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, [pid 5539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5218] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./8/bus") = 0 [pid 5218] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] unlink("./8/binderfs") = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3) = 0 [pid 5218] rmdir("./8") = 0 [pid 5218] mkdir("./9", 0777./strace-static-x86_64: Process 5540 attached [pid 5540] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5539] <... clone3 resumed> => {parent_tid=[5540]}, 88) = 5540 [pid 5540] <... rseq resumed>) = 0 [pid 5539] rt_sigprocmask(SIG_SETMASK, [], [pid 5540] set_robust_list(0x7f37740549a0, 24 [pid 5539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5540] <... set_robust_list resumed>) = 0 [pid 5539] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] rt_sigprocmask(SIG_SETMASK, [], [pid 5539] <... futex resumed>) = 0 [pid 5540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5539] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5540] memfd_create("syzkaller", 0 [pid 5538] <... close resumed>) = 0 [pid 5218] <... mkdir resumed>) = 0 [pid 5540] <... memfd_create resumed>) = 3 [pid 5540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5538] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] ioctl(3, LOOP_CLR_FD [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5538] <... futex resumed>) = 1 [pid 5516] <... fsconfig resumed>) = 0 [pid 5218] <... ioctl resumed>) = 0 [pid 5538] symlink("./file1", "./bus" [pid 5516] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] close(3 [pid 5516] <... futex resumed>) = 0 [pid 5516] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5538] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5538] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5538] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] exit_group(0 [pid 5538] <... futex resumed>) = ? [pid 5516] <... futex resumed>) = ? [pid 5514] <... exit_group resumed>) = ? [pid 5538] +++ exited with 0 +++ [pid 5516] +++ exited with 0 +++ [pid 5514] +++ exited with 0 +++ [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5514, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=39 /* 0.39 s */} --- [pid 5217] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5217] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 84.670312][ T5538] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5217] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5217] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... close resumed>) = 0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5541 ./strace-static-x86_64: Process 5541 attached [pid 5541] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5541] chdir("./9") = 0 [pid 5541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5541] setpgid(0, 0) = 0 [pid 5541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5541] write(3, "1000", 4) = 4 [pid 5541] close(3) = 0 [pid 5541] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5541] write(1, "executing program\n", 18 [pid 5530] <... write resumed>) = 20699119 [pid 5541] <... write resumed>) = 18 [pid 5541] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5541] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5541] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5541] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5530] munmap(0x7f376bc00000, 138412032 [pid 5541] <... clone3 resumed> => {parent_tid=[5542]}, 88) = 5542 [pid 5541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5541] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5542 attached [pid 5542] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5542] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5542] memfd_create("syzkaller", 0) = 3 [pid 5542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5530] <... munmap resumed>) = 0 [pid 5530] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5530] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5217] <... umount2 resumed>) = 0 [pid 5217] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5530] close(3 [pid 5217] <... openat resumed>) = 4 [pid 5530] <... close resumed>) = 0 [pid 5217] newfstatat(4, "", [pid 5530] close(4 [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5530] <... close resumed>) = 0 [pid 5217] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, [pid 5530] mkdir("./bus", 0777 [pid 5217] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5217] close(4) = 0 [pid 5217] rmdir("./8/bus" [pid 5530] <... mkdir resumed>) = 0 [pid 5217] <... rmdir resumed>) = 0 [pid 5217] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5530] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] unlink("./8/binderfs") = 0 [pid 5217] getdents64(3, [pid 5218] <... close resumed>) = 0 [pid 5217] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5217] close(3) = 0 [pid 5217] rmdir("./8") = 0 [pid 5217] mkdir("./9", 0777) = 0 [ 84.968244][ T5530] loop1: detected capacity change from 0 to 40427 [ 85.005448][ T5530] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5543 attached [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5543 [pid 5217] <... openat resumed>) = 3 [pid 5217] ioctl(3, LOOP_CLR_FD [pid 5543] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5217] <... ioctl resumed>) = 0 [pid 5543] chdir("./9" [pid 5217] close(3 [pid 5543] <... chdir resumed>) = 0 [pid 5543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5543] setpgid(0, 0) = 0 [pid 5543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 85.032902][ T5530] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 5543] write(3, "1000", 4) = 4 [pid 5543] close(3) = 0 [pid 5543] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5543] write(1, "executing program\n", 18) = 18 [pid 5543] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5543] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5543] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5543] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5543] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5547 attached => {parent_tid=[5547]}, 88) = 5547 [pid 5547] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5547] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5547] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5547] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5543] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] <... futex resumed>) = 0 [pid 5543] <... futex resumed>) = 1 [pid 5547] memfd_create("syzkaller", 0 [pid 5543] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5547] <... memfd_create resumed>) = 3 [pid 5547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 85.103306][ T5530] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5530] <... mount resumed>) = 0 [pid 5530] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5530] chdir("./bus") = 0 [pid 5530] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5217] <... close resumed>) = 0 [pid 5530] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5530] <... futex resumed>) = 1 [pid 5529] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5549 attached [pid 5530] mkdir("./bus", 000 [pid 5529] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [ 85.287923][ T5530] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 85.318204][ T5530] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 5549] set_robust_list(0x55556d6356a0, 24 [pid 5529] <... futex resumed>) = 0 [pid 5529] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5549] <... set_robust_list resumed>) = 0 [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5549 [pid 5549] chdir("./9") = 0 [pid 5549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5549] setpgid(0, 0) = 0 [pid 5549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5549] write(3, "1000", 4) = 4 [pid 5549] close(3) = 0 [pid 5530] <... mkdir resumed>) = 0 [pid 5549] symlink("/dev/binderfs", "./binderfs" [pid 5530] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5529] <... futex resumed>) = 0 [pid 5530] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5529] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] <... symlink resumed>) = 0 [pid 5530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5529] <... futex resumed>) = 0 executing program [pid 5549] write(1, "executing program\n", 18 [pid 5530] fspick(AT_FDCWD, ".", 0 [pid 5529] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5549] <... write resumed>) = 18 [pid 5530] <... fspick resumed>) = 4 [pid 5530] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5530] <... futex resumed>) = 1 [pid 5529] <... futex resumed>) = 0 [pid 5549] <... futex resumed>) = 0 [pid 5530] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5549] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5529] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5530] <... futex resumed>) = 0 [pid 5529] <... futex resumed>) = 1 [pid 5530] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5529] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5530] <... fsconfig resumed>) = 0 [pid 5530] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5530] <... futex resumed>) = 0 [pid 5549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5540] <... write resumed>) = 20699119 [pid 5530] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5529] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] <... mmap resumed>) = 0x7f3774034000 [pid 5540] munmap(0x7f376bc00000, 138412032 [pid 5529] <... futex resumed>) = 0 [pid 5529] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5549] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5540] <... munmap resumed>) = 0 [pid 5540] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5550 attached [pid 5550] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5549] <... clone3 resumed> => {parent_tid=[5550]}, 88) = 5550 [pid 5540] <... openat resumed>) = 4 [pid 5550] <... rseq resumed>) = 0 [pid 5549] rt_sigprocmask(SIG_SETMASK, [], [pid 5540] ioctl(4, LOOP_SET_FD, 3 [pid 5550] set_robust_list(0x7f37740549a0, 24 [pid 5549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5550] <... set_robust_list resumed>) = 0 [pid 5549] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5550] rt_sigprocmask(SIG_SETMASK, [], [pid 5549] <... futex resumed>) = 0 [pid 5550] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5549] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5550] memfd_create("syzkaller", 0 [pid 5540] <... ioctl resumed>) = 0 [pid 5550] <... memfd_create resumed>) = 3 [pid 5540] close(3 [pid 5550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5540] <... close resumed>) = 0 [pid 5550] <... mmap resumed>) = 0x7f376bc00000 [pid 5529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5529] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5529] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5529] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5529] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5551]}, 88) = 5551 [pid 5529] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5529] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5529] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5551 attached [pid 5551] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5540] close(4 [pid 5551] set_robust_list(0x7f37740339a0, 24 [pid 5540] <... close resumed>) = 0 [pid 5540] mkdir("./bus", 0777 [pid 5551] <... set_robust_list resumed>) = 0 [pid 5551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5551] memfd_create("syzkaller", 0) = 5 [pid 5551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 85.451783][ T5540] loop2: detected capacity change from 0 to 40427 [pid 5540] <... mkdir resumed>) = 0 [pid 5540] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [ 85.519491][ T5540] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 85.527278][ T5540] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 5551] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5551] munmap(0x7f376bc00000, 138412032 [pid 5530] <... fsconfig resumed>) = 0 [pid 5551] <... munmap resumed>) = 0 [pid 5551] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5530] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5551] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5530] <... futex resumed>) = 0 [pid 5530] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 85.594949][ T5540] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 5551] close(5) = 0 [pid 5551] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5529] <... futex resumed>) = 0 [pid 5529] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5530] <... futex resumed>) = 0 [pid 5529] <... futex resumed>) = 1 [pid 5530] symlink("./file1", "./bus" [pid 5529] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5551] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5530] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5542] <... write resumed>) = 20699119 [pid 5530] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5529] <... futex resumed>) = 0 [pid 5529] exit_group(0 [pid 5551] <... futex resumed>) = ? [pid 5542] munmap(0x7f376bc00000, 138412032 [pid 5529] <... exit_group resumed>) = ? [pid 5551] +++ exited with 0 +++ [pid 5530] +++ exited with 0 +++ [pid 5529] +++ exited with 0 +++ [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5529, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=35 /* 0.35 s */} --- [pid 5215] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5215] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5215] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [ 85.661651][ T5530] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5215] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5542] <... munmap resumed>) = 0 [pid 5542] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5542] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5542] close(3) = 0 [pid 5542] close(4) = 0 [pid 5542] mkdir("./bus", 0777) = 0 [ 85.739226][ T5542] loop0: detected capacity change from 0 to 40427 [ 85.748305][ T5540] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.755360][ T5540] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 5542] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5540] <... mount resumed>) = 0 [pid 5540] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5540] chdir("./bus") = 0 [pid 5540] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 85.787418][ T5542] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 85.803832][ T5542] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 5540] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = 1 [pid 5539] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] mkdir("./bus", 000 [pid 5539] <... futex resumed>) = 0 [pid 5539] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... mkdir resumed>) = 0 [pid 5540] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5539] <... futex resumed>) = 0 [pid 5539] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5540] fspick(AT_FDCWD, ".", 0 [pid 5539] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... fspick resumed>) = 4 [pid 5540] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5539] <... futex resumed>) = 0 [pid 5540] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5539] <... futex resumed>) = 0 [pid 5540] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5539] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... fsconfig resumed>) = 0 [pid 5540] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5539] <... futex resumed>) = 0 [pid 5540] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5539] <... futex resumed>) = 0 [pid 5540] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5539] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... umount2 resumed>) = 0 [pid 5215] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5215] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5215] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5215] close(4) = 0 [pid 5215] rmdir("./9/bus") = 0 [pid 5215] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] unlink("./9/binderfs") = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [ 85.872453][ T5542] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 5215] close(3) = 0 [pid 5215] rmdir("./9") = 0 [pid 5215] mkdir("./10", 0777) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [pid 5215] close(3 [pid 5539] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5539] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5547] <... write resumed>) = 20699119 [pid 5539] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5539] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5547] munmap(0x7f376bc00000, 138412032 [pid 5539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5559 attached [pid 5559] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5539] <... clone3 resumed> => {parent_tid=[5559]}, 88) = 5559 [pid 5539] rt_sigprocmask(SIG_SETMASK, [], [pid 5559] <... rseq resumed>) = 0 [pid 5559] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5559] rt_sigprocmask(SIG_SETMASK, [], [pid 5539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5559] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5547] <... munmap resumed>) = 0 [pid 5539] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5559] memfd_create("syzkaller", 0) = 5 [pid 5547] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5547] ioctl(4, LOOP_SET_FD, 3 [pid 5559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5547] <... ioctl resumed>) = 0 [pid 5547] close(3) = 0 [pid 5547] close(4) = 0 [pid 5547] mkdir("./bus", 0777) = 0 [pid 5559] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5547] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5542] <... mount resumed>) = 0 [pid 5542] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5542] chdir("./bus") = 0 [ 86.018814][ T5542] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 86.020995][ T5547] loop4: detected capacity change from 0 to 40427 [ 86.058049][ T5542] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 5542] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5542] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5540] <... fsconfig resumed>) = 0 [pid 5542] mkdir("./bus", 000 [pid 5541] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] <... mkdir resumed>) = 0 [pid 5542] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5542] fspick(AT_FDCWD, ".", 0 [pid 5541] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] <... fspick resumed>) = 4 [pid 5541] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5542] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5542] <... futex resumed>) = 0 [pid 5542] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5541] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] <... fsconfig resumed>) = 0 [pid 5541] <... futex resumed>) = 0 [pid 5541] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5542] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5542] <... futex resumed>) = 0 [pid 5541] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5542] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5541] <... futex resumed>) = 0 [pid 5541] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5559] <... write resumed>) = 2097152 [pid 5559] munmap(0x7f376bc00000, 138412032) = 0 [pid 5559] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 86.099030][ T5547] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 86.113805][ T5547] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 5559] close(5) = 0 [pid 5541] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5541] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5541] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5541] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5564 attached [pid 5559] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... clone3 resumed> => {parent_tid=[5564]}, 88) = 5564 [pid 5564] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5559] <... futex resumed>) = 1 [pid 5541] rt_sigprocmask(SIG_SETMASK, [], [pid 5539] <... futex resumed>) = 0 [pid 5564] <... rseq resumed>) = 0 [pid 5559] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5564] set_robust_list(0x7f37740339a0, 24 [pid 5540] <... futex resumed>) = 0 [pid 5564] <... set_robust_list resumed>) = 0 [pid 5539] <... futex resumed>) = 1 [pid 5564] rt_sigprocmask(SIG_SETMASK, [], [pid 5540] symlink("./file1", "./bus" [pid 5539] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5541] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5541] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5564] memfd_create("syzkaller", 0 [pid 5540] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5564] <... memfd_create resumed>) = 5 [pid 5564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5540] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5539] <... futex resumed>) = 0 [pid 5564] <... mmap resumed>) = 0x7f376bc00000 [pid 5540] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] exit_group(0 [pid 5559] <... futex resumed>) = ? [pid 5540] <... futex resumed>) = ? [pid 5539] <... exit_group resumed>) = ? [pid 5540] +++ exited with 0 +++ [pid 5559] +++ exited with 0 +++ [pid 5539] +++ exited with 0 +++ [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5539, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=40 /* 0.40 s */} --- [pid 5216] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5216] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5564] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5216] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [ 86.182970][ T5547] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.199528][ T5540] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5216] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5550] <... write resumed>) = 20699119 [pid 5550] munmap(0x7f376bc00000, 138412032) = 0 [pid 5564] <... write resumed>) = 2097152 [pid 5215] <... close resumed>) = 0 [pid 5564] munmap(0x7f376bc00000, 138412032 [pid 5550] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5564] <... munmap resumed>) = 0 [pid 5550] <... openat resumed>) = 4 [pid 5550] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5566 attached [pid 5215] <... clone resumed>, child_tidptr=0x55556d635690) = 5566 [pid 5566] set_robust_list(0x55556d6356a0, 24 [pid 5542] <... fsconfig resumed>) = 0 [pid 5566] <... set_robust_list resumed>) = 0 [pid 5566] chdir("./10") = 0 [pid 5566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5566] setpgid(0, 0) = 0 [pid 5566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5564] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5566] write(3, "1000", 4 [pid 5564] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5566] <... write resumed>) = 4 [pid 5542] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] close(3 [pid 5542] <... futex resumed>) = 0 [pid 5566] <... close resumed>) = 0 [pid 5542] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5566] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5566] write(1, "executing program\n", 18) = 18 [pid 5566] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5566] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5564] close(5 [pid 5550] <... ioctl resumed>) = 0 [pid 5566] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5567 attached [pid 5550] close(3) = 0 [pid 5567] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5550] close(4 [pid 5567] <... rseq resumed>) = 0 [pid 5566] <... clone3 resumed> => {parent_tid=[5567]}, 88) = 5567 [pid 5550] <... close resumed>) = 0 [pid 5567] set_robust_list(0x7f37740549a0, 24 [pid 5566] rt_sigprocmask(SIG_SETMASK, [], [pid 5550] mkdir("./bus", 0777 [pid 5567] <... set_robust_list resumed>) = 0 [pid 5566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5566] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5566] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5550] <... mkdir resumed>) = 0 [pid 5567] rt_sigprocmask(SIG_SETMASK, [], [pid 5550] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5567] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 86.326603][ T5547] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.340659][ T5550] loop3: detected capacity change from 0 to 40427 [ 86.354491][ T5547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5547] <... mount resumed>) = 0 [pid 5567] memfd_create("syzkaller", 0 [pid 5547] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5564] <... close resumed>) = 0 [pid 5547] <... openat resumed>) = 3 [pid 5567] <... memfd_create resumed>) = 3 [pid 5567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5547] chdir("./bus") = 0 [pid 5547] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5564] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5541] <... futex resumed>) = 0 [pid 5541] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5541] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5564] <... futex resumed>) = 1 [pid 5567] <... mmap resumed>) = 0x7f376bc00000 [pid 5547] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] <... futex resumed>) = 0 [pid 5564] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5542] symlink("./file1", "./bus" [pid 5547] <... futex resumed>) = 1 [pid 5547] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] <... umount2 resumed>) = 0 [pid 5543] <... futex resumed>) = 0 [pid 5543] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] <... futex resumed>) = 0 [pid 5543] <... futex resumed>) = 1 [pid 5547] mkdir("./bus", 000 [pid 5543] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5216] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5216] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5216] close(4) = 0 [ 86.377648][ T5550] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 86.396653][ T5550] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.408209][ T5542] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5216] rmdir("./9/bus") = 0 [pid 5542] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5216] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5542] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5542] <... futex resumed>) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5216] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5542] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] exit_group(0 [pid 5564] <... futex resumed>) = ? [pid 5542] <... futex resumed>) = ? [pid 5541] <... exit_group resumed>) = ? [pid 5216] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5564] +++ exited with 0 +++ [pid 5216] unlink("./9/binderfs") = 0 [pid 5216] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5216] close(3) = 0 [pid 5216] rmdir("./9") = 0 [pid 5547] <... mkdir resumed>) = 0 [pid 5542] +++ exited with 0 +++ [pid 5541] +++ exited with 0 +++ [pid 5547] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] mkdir("./10", 0777 [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5541, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=36 /* 0.36 s */} --- [pid 5547] <... futex resumed>) = 1 [pid 5543] <... futex resumed>) = 0 [pid 5547] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5543] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... mkdir resumed>) = 0 [pid 5543] <... futex resumed>) = 0 [pid 5543] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5214] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5214] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5547] fspick(AT_FDCWD, ".", 0) = 4 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5547] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... openat resumed>) = 3 [pid 5547] <... futex resumed>) = 1 [pid 5543] <... futex resumed>) = 0 [pid 5216] ioctl(3, LOOP_CLR_FD [pid 5543] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5543] <... futex resumed>) = 0 [pid 5216] <... ioctl resumed>) = 0 [pid 5547] <... fsconfig resumed>) = 0 [pid 5543] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 86.435555][ T5550] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 5216] close(3 [pid 5547] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5547] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5543] <... futex resumed>) = 0 [pid 5543] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] <... futex resumed>) = 0 [pid 5543] <... futex resumed>) = 1 [pid 5547] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5543] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5543] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5543] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5543] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5572 attached [pid 5550] <... mount resumed>) = 0 [pid 5543] <... clone3 resumed> => {parent_tid=[5572]}, 88) = 5572 [pid 5543] rt_sigprocmask(SIG_SETMASK, [], [pid 5572] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5550] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5572] <... rseq resumed>) = 0 [pid 5543] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5550] <... openat resumed>) = 3 [pid 5543] <... futex resumed>) = 0 [pid 5572] rt_sigprocmask(SIG_SETMASK, [], [pid 5550] chdir("./bus" [pid 5543] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5572] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5550] <... chdir resumed>) = 0 [pid 5550] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5572] memfd_create("syzkaller", 0) = 5 [pid 5550] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5550] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5550] <... futex resumed>) = 1 [pid 5549] <... futex resumed>) = 0 [pid 5572] <... mmap resumed>) = 0x7f376bc00000 [pid 5549] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5550] mkdir("./bus", 000 [pid 5549] <... futex resumed>) = 0 [pid 5549] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5550] <... mkdir resumed>) = 0 [pid 5550] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] <... fsconfig resumed>) = 0 [pid 5547] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.558595][ T5550] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.583341][ T5550] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 5547] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5550] <... futex resumed>) = 1 [pid 5549] <... futex resumed>) = 0 [pid 5550] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5549] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5550] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5549] <... futex resumed>) = 0 [pid 5550] fspick(AT_FDCWD, ".", 0 [pid 5549] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5550] <... fspick resumed>) = 4 [pid 5550] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5550] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5549] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5550] <... futex resumed>) = 0 [pid 5549] <... futex resumed>) = 1 [pid 5550] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5549] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5550] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5549] <... futex resumed>) = 0 [pid 5549] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5549] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5550] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5572] <... write resumed>) = 2097152 [pid 5549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5214] <... umount2 resumed>) = 0 [pid 5549] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5549] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5572] munmap(0x7f376bc00000, 138412032 [pid 5549] <... mprotect resumed>) = 0 [pid 5549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5573]}, 88) = 5573 [pid 5549] rt_sigprocmask(SIG_SETMASK, [], [pid 5572] <... munmap resumed>) = 0 [pid 5549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5549] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5549] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5573 attached [pid 5573] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5573] set_robust_list(0x7f37740339a0, 24 [pid 5214] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5573] <... set_robust_list resumed>) = 0 [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5573] rt_sigprocmask(SIG_SETMASK, [], [pid 5214] newfstatat(AT_FDCWD, "./9/bus", [pid 5573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5573] memfd_create("syzkaller", 0 [pid 5214] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5573] <... memfd_create resumed>) = 5 [pid 5572] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5572] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5214] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5572] close(5 [pid 5573] <... mmap resumed>) = 0x7f376bc00000 [pid 5214] <... openat resumed>) = 4 [pid 5214] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5214] close(4) = 0 [pid 5214] rmdir("./9/bus") = 0 [pid 5214] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] unlink("./9/binderfs") = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5214] close(3) = 0 [pid 5214] rmdir("./9") = 0 [pid 5572] <... close resumed>) = 0 [pid 5567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5214] mkdir("./10", 0777) = 0 [pid 5572] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5543] <... futex resumed>) = 0 [pid 5572] <... futex resumed>) = 1 [pid 5543] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... openat resumed>) = 3 [pid 5572] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5547] <... futex resumed>) = 0 [pid 5543] <... futex resumed>) = 1 [pid 5547] symlink("./file1", "./bus" [pid 5214] ioctl(3, LOOP_CLR_FD [pid 5543] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... ioctl resumed>) = 0 [pid 5573] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5214] close(3 [pid 5550] <... fsconfig resumed>) = 0 [pid 5216] <... close resumed>) = 0 [pid 5547] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5547] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5543] <... futex resumed>) = 0 [pid 5550] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5547] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5543] exit_group(0 [pid 5550] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5547] <... futex resumed>) = ? [pid 5543] <... exit_group resumed>) = ? [pid 5547] +++ exited with 0 +++ [pid 5572] <... futex resumed>) = ? [ 86.772111][ T5547] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5572] +++ exited with 0 +++ [pid 5543] +++ exited with 0 +++ [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5574 attached [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5543, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=43 /* 0.43 s */} --- [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5574 [pid 5574] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5574] chdir("./10" [pid 5218] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5574] <... chdir resumed>) = 0 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5574] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5218] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5574] <... prctl resumed>) = 0 [pid 5574] setpgid(0, 0 [pid 5218] <... openat resumed>) = 3 [pid 5574] <... setpgid resumed>) = 0 [pid 5574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5573] <... write resumed>) = 2097152 [pid 5218] newfstatat(3, "", [pid 5574] <... openat resumed>) = 3 [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5574] write(3, "1000", 4 [pid 5218] getdents64(3, [pid 5574] <... write resumed>) = 4 [pid 5574] close(3 [pid 5218] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5574] <... close resumed>) = 0 [pid 5218] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5574] symlink("/dev/binderfs", "./binderfs" [pid 5573] munmap(0x7f376bc00000, 138412032 [pid 5574] <... symlink resumed>) = 0 executing program [pid 5574] write(1, "executing program\n", 18 [pid 5573] <... munmap resumed>) = 0 [pid 5574] <... write resumed>) = 18 [pid 5574] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5574] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5574] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5573] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5573] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5574] <... mmap resumed>) = 0x7f3774034000 [pid 5574] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5573] close(5 [pid 5574] <... mprotect resumed>) = 0 [pid 5574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5575 attached [pid 5575] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5574] <... clone3 resumed> => {parent_tid=[5575]}, 88) = 5575 [pid 5575] <... rseq resumed>) = 0 [pid 5574] rt_sigprocmask(SIG_SETMASK, [], [pid 5575] set_robust_list(0x7f37740549a0, 24 [pid 5574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5575] <... set_robust_list resumed>) = 0 [pid 5574] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] rt_sigprocmask(SIG_SETMASK, [], [pid 5574] <... futex resumed>) = 0 [pid 5575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5574] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5575] memfd_create("syzkaller", 0) = 3 [pid 5575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5573] <... close resumed>) = 0 [pid 5573] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5549] <... futex resumed>) = 0 [pid 5549] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5549] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5573] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5550] <... futex resumed>) = 0 [pid 5550] symlink("./file1", "./bus" [pid 5549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5550] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5550] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] exit_group(0 [pid 5573] <... futex resumed>) = ? [pid 5549] <... exit_group resumed>) = ? [pid 5573] +++ exited with 0 +++ [pid 5550] <... futex resumed>) = ? [pid 5550] +++ exited with 0 +++ [pid 5549] +++ exited with 0 +++ [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5549, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=41 /* 0.41 s */} --- [pid 5217] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 86.920168][ T5550] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5217] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5217] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5217] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... close resumed>) = 0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d635690) = 5576 ./strace-static-x86_64: Process 5576 attached [pid 5576] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5576] chdir("./10") = 0 [pid 5576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5576] setpgid(0, 0) = 0 [pid 5576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5576] write(3, "1000", 4) = 4 [pid 5576] close(3) = 0 [pid 5576] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5576] write(1, "executing program\n", 18) = 18 [pid 5576] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5576] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5576] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5577]}, 88) = 5577 [pid 5576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5576] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5577 attached [pid 5577] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5577] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5577] memfd_create("syzkaller", 0) = 3 [pid 5577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5218] <... umount2 resumed>) = 0 [pid 5218] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5218] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./9/bus") = 0 [pid 5218] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] unlink("./9/binderfs") = 0 [pid 5217] <... umount2 resumed>) = 0 [pid 5218] getdents64(3, [pid 5217] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] close(3 [pid 5217] newfstatat(AT_FDCWD, "./9/bus", [pid 5218] <... close resumed>) = 0 [pid 5218] rmdir("./9") = 0 [pid 5218] mkdir("./10", 0777) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5217] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] <... openat resumed>) = 3 [pid 5217] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] ioctl(3, LOOP_CLR_FD [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5218] <... ioctl resumed>) = 0 [pid 5217] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5218] close(3 [pid 5217] <... openat resumed>) = 4 [pid 5575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5217] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5217] close(4) = 0 [pid 5217] rmdir("./9/bus") = 0 [pid 5217] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] unlink("./9/binderfs") = 0 [pid 5217] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5217] close(3) = 0 [pid 5217] rmdir("./9") = 0 [pid 5567] <... write resumed>) = 20699119 [pid 5567] munmap(0x7f376bc00000, 138412032 [pid 5217] mkdir("./10", 0777) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5567] <... munmap resumed>) = 0 [pid 5217] <... openat resumed>) = 3 [pid 5217] ioctl(3, LOOP_CLR_FD) = 0 [pid 5217] close(3 [pid 5567] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5567] ioctl(4, LOOP_SET_FD, 3 [pid 5577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5567] <... ioctl resumed>) = 0 [pid 5567] close(3) = 0 [pid 5567] close(4) = 0 [pid 5567] mkdir("./bus", 0777) = 0 [ 87.369131][ T5567] loop1: detected capacity change from 0 to 40427 [ 87.398595][ T5567] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 87.428088][ T5567] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.470582][ T5567] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5567] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5218] <... close resumed>) = 0 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5581 attached [pid 5581] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5581] chdir("./10") = 0 [pid 5581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5581 [pid 5581] setpgid(0, 0) = 0 [pid 5581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5581] write(3, "1000", 4) = 4 [pid 5581] close(3) = 0 [pid 5581] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5581] write(1, "executing program\n", 18) = 18 [pid 5581] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5581] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5581] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5581] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5583 attached [pid 5567] <... mount resumed>) = 0 [pid 5583] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5581] <... clone3 resumed> => {parent_tid=[5583]}, 88) = 5583 [pid 5581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5581] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5567] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5567] chdir("./bus") = 0 [pid 5567] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5583] set_robust_list(0x7f37740549a0, 24 [pid 5567] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] <... futex resumed>) = 0 [pid 5566] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5566] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5567] <... futex resumed>) = 1 [pid 5567] mkdir("./bus", 000 [pid 5583] <... set_robust_list resumed>) = 0 [pid 5583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 87.597148][ T5567] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.609596][ T5567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 5583] memfd_create("syzkaller", 0 [pid 5567] <... mkdir resumed>) = 0 [pid 5567] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5566] <... futex resumed>) = 0 [pid 5566] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5583] <... memfd_create resumed>) = 3 [pid 5567] fspick(AT_FDCWD, ".", 0 [pid 5566] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5567] <... fspick resumed>) = 4 [pid 5567] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] <... mmap resumed>) = 0x7f376bc00000 [pid 5567] <... futex resumed>) = 1 [pid 5566] <... futex resumed>) = 0 [pid 5566] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5567] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5566] <... futex resumed>) = 0 [pid 5567] <... fsconfig resumed>) = 0 [pid 5566] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5567] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5566] <... futex resumed>) = 0 [pid 5566] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5566] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5567] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5566] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5566] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5566] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5217] <... close resumed>) = 0 [pid 5566] <... clone3 resumed> => {parent_tid=[5584]}, 88) = 5584 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5584 attached [pid 5566] rt_sigprocmask(SIG_SETMASK, [], [pid 5584] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5584] <... rseq resumed>) = 0 [pid 5566] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] set_robust_list(0x7f37740339a0, 24 [pid 5566] <... futex resumed>) = 0 [pid 5566] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5584] <... set_robust_list resumed>) = 0 [pid 5584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5584] memfd_create("syzkaller", 0) = 5 [pid 5584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 ./strace-static-x86_64: Process 5585 attached [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5585 [pid 5585] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5585] chdir("./10") = 0 [pid 5585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5585] setpgid(0, 0) = 0 [pid 5585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5584] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5585] <... openat resumed>) = 3 [pid 5575] <... write resumed>) = 20699119 [pid 5585] write(3, "1000", 4 [pid 5575] munmap(0x7f376bc00000, 138412032 [pid 5585] <... write resumed>) = 4 [pid 5575] <... munmap resumed>) = 0 executing program [pid 5585] close(3) = 0 [pid 5585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5585] write(1, "executing program\n", 18) = 18 [pid 5585] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5585] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5585] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5575] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5585] <... clone3 resumed> => {parent_tid=[5586]}, 88) = 5586 [pid 5575] <... openat resumed>) = 4 [pid 5585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5585] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5585] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5575] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5586 attached [pid 5586] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5586] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5586] memfd_create("syzkaller", 0) = 3 [pid 5586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5567] <... fsconfig resumed>) = 0 [pid 5575] <... ioctl resumed>) = 0 [pid 5567] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] close(3 [pid 5567] <... futex resumed>) = 0 [pid 5575] <... close resumed>) = 0 [pid 5567] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] close(4 [pid 5584] <... write resumed>) = 2097152 [pid 5575] <... close resumed>) = 0 [pid 5584] munmap(0x7f376bc00000, 138412032) = 0 [pid 5575] mkdir("./bus", 0777 [pid 5584] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5575] <... mkdir resumed>) = 0 [pid 5584] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5575] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [ 87.812527][ T5575] loop2: detected capacity change from 0 to 40427 [pid 5584] close(5 [pid 5577] <... write resumed>) = 20699119 [ 87.853890][ T5575] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [pid 5577] munmap(0x7f376bc00000, 138412032 [pid 5584] <... close resumed>) = 0 [pid 5584] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5577] <... munmap resumed>) = 0 [pid 5566] <... futex resumed>) = 0 [pid 5584] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5577] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5566] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... openat resumed>) = 4 [pid 5566] <... futex resumed>) = 1 [pid 5567] <... futex resumed>) = 0 [pid 5567] symlink("./file1", "./bus") = -1 EEXIST (File exists) [pid 5577] ioctl(4, LOOP_SET_FD, 3 [pid 5583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5567] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5567] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5566] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5566] exit_group(0 [pid 5584] <... futex resumed>) = ? [pid 5566] <... exit_group resumed>) = ? [pid 5567] <... futex resumed>) = ? [pid 5567] +++ exited with 0 +++ [pid 5584] +++ exited with 0 +++ [pid 5566] +++ exited with 0 +++ [pid 5577] <... ioctl resumed>) = 0 [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5566, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=37 /* 0.37 s */} --- [pid 5577] close(3) = 0 [ 87.897086][ T5575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 87.918631][ T5567] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 87.938861][ T5577] loop0: detected capacity change from 0 to 40427 [pid 5577] close(4) = 0 [pid 5577] mkdir("./bus", 0777) = 0 [pid 5577] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5215] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5215] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [ 87.969297][ T5575] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.988209][ T5577] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 88.007738][ T5577] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 5215] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [ 88.078157][ T5577] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 5586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5215] <... umount2 resumed>) = 0 [pid 5215] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5215] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5215] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5215] close(4) = 0 [pid 5215] rmdir("./10/bus") = 0 [pid 5215] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] unlink("./10/binderfs") = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5575] <... mount resumed>) = 0 [pid 5215] close(3 [pid 5575] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5215] <... close resumed>) = 0 [pid 5215] rmdir("./10" [pid 5575] <... openat resumed>) = 3 [pid 5575] chdir("./bus") = 0 [pid 5575] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5215] <... rmdir resumed>) = 0 [pid 5575] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5574] <... futex resumed>) = 0 [pid 5215] mkdir("./11", 0777 [pid 5574] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] mkdir("./bus", 000 [pid 5574] <... futex resumed>) = 0 [pid 5574] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... mkdir resumed>) = 0 [ 88.151887][ T5575] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 88.167999][ T5575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5575] <... mkdir resumed>) = 0 [pid 5215] <... openat resumed>) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [pid 5215] close(3 [pid 5575] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5574] <... futex resumed>) = 0 [pid 5575] fspick(AT_FDCWD, ".", 0 [pid 5574] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5575] <... fspick resumed>) = 4 [pid 5574] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5575] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5574] <... futex resumed>) = 0 [pid 5577] <... mount resumed>) = 0 [pid 5575] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5574] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] <... fsconfig resumed>) = 0 [pid 5574] <... futex resumed>) = 0 [pid 5574] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5575] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5574] <... futex resumed>) = 0 [pid 5577] <... openat resumed>) = 3 [pid 5575] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5574] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5574] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] chdir("./bus") = 0 [ 88.210859][ T5577] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.231831][ T5577] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 5577] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5577] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5577] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5576] <... futex resumed>) = 0 [pid 5576] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5577] mkdir("./bus", 000 [pid 5574] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5574] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5574] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5574] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5577] <... mkdir resumed>) = 0 [pid 5574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5595 attached [pid 5577] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5574] <... clone3 resumed> => {parent_tid=[5595]}, 88) = 5595 [pid 5595] <... rseq resumed>) = 0 [pid 5577] <... futex resumed>) = 1 [pid 5576] <... futex resumed>) = 0 [pid 5574] rt_sigprocmask(SIG_SETMASK, [], [pid 5595] set_robust_list(0x7f37740339a0, 24 [pid 5577] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5576] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5595] <... set_robust_list resumed>) = 0 [pid 5577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5574] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] rt_sigprocmask(SIG_SETMASK, [], [pid 5577] fspick(AT_FDCWD, ".", 0 [pid 5574] <... futex resumed>) = 0 [pid 5595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5577] <... fspick resumed>) = 4 [pid 5576] <... futex resumed>) = 0 [pid 5595] memfd_create("syzkaller", 0 [pid 5577] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5576] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5595] <... memfd_create resumed>) = 5 [pid 5577] <... futex resumed>) = 0 [pid 5576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5577] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5576] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] <... mmap resumed>) = 0x7f376bc00000 [pid 5577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5576] <... futex resumed>) = 0 [pid 5577] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5576] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] <... fsconfig resumed>) = 0 [pid 5577] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5576] <... futex resumed>) = 0 [pid 5576] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5574] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5595] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5576] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5576] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5576] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5596]}, 88) = 5596 [pid 5576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5576] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5596 attached ) = 0 [pid 5596] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5576] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5596] <... rseq resumed>) = 0 [pid 5583] <... write resumed>) = 20699119 [pid 5596] set_robust_list(0x7f37740339a0, 24 [pid 5583] munmap(0x7f376bc00000, 138412032 [pid 5596] <... set_robust_list resumed>) = 0 [pid 5596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5596] memfd_create("syzkaller", 0) = 5 [pid 5596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5595] <... write resumed>) = 2097152 [pid 5595] munmap(0x7f376bc00000, 138412032) = 0 [pid 5583] <... munmap resumed>) = 0 [pid 5583] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5595] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5575] <... fsconfig resumed>) = 0 [pid 5595] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5575] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] ioctl(4, LOOP_SET_FD, 3 [pid 5595] close(5 [pid 5575] <... futex resumed>) = 0 [pid 5575] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5583] <... ioctl resumed>) = 0 [pid 5583] close(3) = 0 [pid 5583] close(4) = 0 [pid 5583] mkdir("./bus", 0777) = 0 [ 88.483585][ T5583] loop4: detected capacity change from 0 to 40427 [pid 5583] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5595] <... close resumed>) = 0 [pid 5596] <... write resumed>) = 2097152 [pid 5595] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5574] <... futex resumed>) = 0 [pid 5574] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] <... futex resumed>) = 0 [pid 5574] <... futex resumed>) = 1 [pid 5596] munmap(0x7f376bc00000, 138412032 [pid 5575] symlink("./file1", "./bus" [pid 5574] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5596] <... munmap resumed>) = 0 [pid 5596] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5596] close(5 [pid 5577] <... fsconfig resumed>) = 0 [ 88.538515][ T5583] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 88.546610][ T5583] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 88.567085][ T5575] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5215] <... close resumed>) = 0 [pid 5596] <... close resumed>) = 0 [pid 5577] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5577] <... futex resumed>) = 0 [pid 5577] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5600 attached [pid 5596] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] <... futex resumed>) = 1 [pid 5574] <... futex resumed>) = 0 [pid 5575] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5574] exit_group(0 [pid 5215] <... clone resumed>, child_tidptr=0x55556d635690) = 5600 [pid 5600] set_robust_list(0x55556d6356a0, 24 [pid 5596] <... futex resumed>) = 1 [pid 5595] <... futex resumed>) = ? [pid 5574] <... exit_group resumed>) = ? [pid 5596] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] <... set_robust_list resumed>) = 0 [pid 5595] +++ exited with 0 +++ [pid 5576] <... futex resumed>) = 0 [pid 5575] <... futex resumed>) = ? [pid 5600] chdir("./11" [pid 5576] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] +++ exited with 0 +++ [pid 5574] +++ exited with 0 +++ [pid 5577] <... futex resumed>) = 0 [pid 5576] <... futex resumed>) = 1 [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5574, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=42 /* 0.42 s */} --- [pid 5576] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] symlink("./file1", "./bus" [pid 5216] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5600] <... chdir resumed>) = 0 [pid 5600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5216] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5600] setpgid(0, 0 [pid 5216] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5600] <... setpgid resumed>) = 0 [pid 5216] <... openat resumed>) = 3 [pid 5216] newfstatat(3, "", [pid 5600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5600] <... openat resumed>) = 3 [pid 5216] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5600] write(3, "1000", 4 [pid 5586] <... write resumed>) = 20699119 [pid 5577] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5216] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5600] <... write resumed>) = 4 [pid 5586] munmap(0x7f376bc00000, 138412032 [pid 5577] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] close(3) = 0 [pid 5600] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5600] write(1, "executing program\n", 18) = 18 [pid 5576] <... futex resumed>) = 0 [pid 5600] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5576] exit_group(0) = ? [pid 5577] <... futex resumed>) = ? [pid 5600] <... futex resumed>) = 0 [pid 5596] <... futex resumed>) = ? [pid 5600] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5596] +++ exited with 0 +++ [pid 5600] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5577] +++ exited with 0 +++ [pid 5576] +++ exited with 0 +++ [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5576, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=50 /* 0.50 s */} --- [ 88.601945][ T5583] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.627682][ T5577] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5214] restart_syscall(<... resuming interrupted clone ...> [pid 5600] <... mmap resumed>) = 0x7f3774034000 [pid 5214] <... restart_syscall resumed>) = 0 [pid 5600] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5600] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5214] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5600] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5214] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5214] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5600] <... clone3 resumed> => {parent_tid=[5602]}, 88) = 5602 ./strace-static-x86_64: Process 5602 attached [pid 5600] rt_sigprocmask(SIG_SETMASK, [], [pid 5602] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5600] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5602] <... rseq resumed>) = 0 [pid 5600] <... futex resumed>) = 0 [pid 5602] set_robust_list(0x7f37740549a0, 24 [pid 5600] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5602] <... set_robust_list resumed>) = 0 [pid 5586] <... munmap resumed>) = 0 [pid 5602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 88.680527][ T5583] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 88.708776][ T5583] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5602] memfd_create("syzkaller", 0) = 3 [pid 5602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5586] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5586] ioctl(4, LOOP_SET_FD, 3 [pid 5583] <... mount resumed>) = 0 [pid 5583] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5583] chdir("./bus") = 0 [pid 5583] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5583] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5581] <... futex resumed>) = 0 [pid 5581] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5583] mkdir("./bus", 000 [pid 5586] <... ioctl resumed>) = 0 [pid 5216] <... umount2 resumed>) = 0 [pid 5586] close(3) = 0 [pid 5216] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5586] close(4) = 0 [pid 5586] mkdir("./bus", 0777) = 0 [pid 5583] <... mkdir resumed>) = 0 [pid 5586] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5583] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = 0 [pid 5581] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5583] <... futex resumed>) = 1 [pid 5583] fspick(AT_FDCWD, ".", 0) = 4 [pid 5583] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] <... futex resumed>) = 0 [pid 5581] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5583] <... futex resumed>) = 1 [pid 5216] newfstatat(AT_FDCWD, "./10/bus", [pid 5583] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5583] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5581] <... futex resumed>) = 0 [pid 5583] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5581] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 88.731849][ T5586] loop3: detected capacity change from 0 to 40427 [ 88.761597][ T5586] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [pid 5581] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5216] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5216] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5216] close(4) = 0 [pid 5216] rmdir("./10/bus") = 0 [pid 5216] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] unlink("./10/binderfs") = 0 [pid 5216] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5216] close(3) = 0 [pid 5216] rmdir("./10") = 0 [ 88.779345][ T5586] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 5216] mkdir("./11", 0777) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5216] ioctl(3, LOOP_CLR_FD) = 0 [pid 5216] close(3 [pid 5581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5581] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5581] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5581] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5581] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5604]}, 88) = 5604 [pid 5581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5581] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5581] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5604 attached [pid 5604] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5604] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5604] memfd_create("syzkaller", 0) = 5 [pid 5604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5604] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5214] <... umount2 resumed>) = 0 [pid 5214] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5214] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5214] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5214] close(4) = 0 [pid 5214] rmdir("./10/bus") = 0 [pid 5214] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] unlink("./10/binderfs") = 0 [pid 5214] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5214] close(3) = 0 [pid 5214] rmdir("./10") = 0 [pid 5214] mkdir("./11", 0777) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5214] ioctl(3, LOOP_CLR_FD) = 0 [pid 5214] close(3 [pid 5604] <... write resumed>) = 2097152 [ 88.901020][ T5586] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 5604] munmap(0x7f376bc00000, 138412032) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5583] <... fsconfig resumed>) = 0 [pid 5583] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5583] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5604] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5604] close(5) = 0 [pid 5604] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5581] <... futex resumed>) = 0 [pid 5581] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5581] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5604] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5583] <... futex resumed>) = 0 [pid 5583] symlink("./file1", "./bus" [pid 5602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5586] <... mount resumed>) = 0 [pid 5586] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5586] chdir("./bus") = 0 [pid 5586] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5586] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5586] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5583] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5585] <... futex resumed>) = 0 [pid 5585] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = 0 [pid 5585] <... futex resumed>) = 1 [pid 5586] mkdir("./bus", 000 [pid 5585] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5586] <... mkdir resumed>) = 0 [pid 5586] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5586] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5583] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5581] <... futex resumed>) = 0 [pid 5581] exit_group(0) = ? [pid 5604] <... futex resumed>) = ? [pid 5585] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] +++ exited with 0 +++ [pid 5586] <... futex resumed>) = 0 [pid 5585] <... futex resumed>) = 1 [pid 5586] fspick(AT_FDCWD, ".", 0 [pid 5585] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5586] <... fspick resumed>) = 4 [pid 5586] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5586] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5585] <... futex resumed>) = 0 [pid 5586] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5585] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5586] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5586] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5585] <... futex resumed>) = 0 [pid 5583] +++ exited with 0 +++ [pid 5581] +++ exited with 0 +++ [ 89.046787][ T5586] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.054980][ T5586] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.056847][ T5583] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5586] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5585] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5581, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=43 /* 0.43 s */} --- [pid 5218] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5218] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5218] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5585] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5585] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5608]}, 88) = 5608 [pid 5585] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5608 attached NULL, 8) = 0 [pid 5585] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5585] <... futex resumed>) = 0 [pid 5585] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5608] <... rseq resumed>) = 0 [pid 5608] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5608] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5608] memfd_create("syzkaller", 0) = 5 [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5216] <... close resumed>) = 0 [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5586] <... fsconfig resumed>) = 0 [pid 5608] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5586] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5586] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5609 attached [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5609 [pid 5609] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5609] chdir("./11") = 0 [pid 5609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5609] setpgid(0, 0) = 0 [pid 5609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "1000", 4) = 4 [pid 5609] close(3) = 0 [pid 5609] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5609] write(1, "executing program\n", 18 [pid 5608] <... write resumed>) = 2097152 [pid 5609] <... write resumed>) = 18 [pid 5609] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5608] munmap(0x7f376bc00000, 138412032 [pid 5609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5608] <... munmap resumed>) = 0 [pid 5609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5608] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5609] <... mmap resumed>) = 0x7f3774034000 [pid 5218] <... umount2 resumed>) = 0 [pid 5214] <... close resumed>) = 0 [pid 5609] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5608] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5609] <... mprotect resumed>) = 0 [pid 5608] close(5 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5218] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5218] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] <... clone3 resumed> => {parent_tid=[5610]}, 88) = 5610 [pid 5218] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5609] rt_sigprocmask(SIG_SETMASK, [], [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... openat resumed>) = 4 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... futex resumed>) = 0 [pid 5218] newfstatat(4, "", [pid 5609] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5610 attached [pid 5218] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5611 attached [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4 [pid 5611] set_robust_list(0x55556d6356a0, 24 [pid 5218] <... close resumed>) = 0 [pid 5611] <... set_robust_list resumed>) = 0 [pid 5218] rmdir("./10/bus" [pid 5214] <... clone resumed>, child_tidptr=0x55556d635690) = 5611 [pid 5611] chdir("./11" [pid 5218] <... rmdir resumed>) = 0 [pid 5611] <... chdir resumed>) = 0 [pid 5610] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5608] <... close resumed>) = 0 [pid 5218] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5610] <... rseq resumed>) = 0 [pid 5608] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... prctl resumed>) = 0 [pid 5610] set_robust_list(0x7f37740549a0, 24 [pid 5608] <... futex resumed>) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5218] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5611] setpgid(0, 0 [pid 5610] <... set_robust_list resumed>) = 0 [pid 5608] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5611] <... setpgid resumed>) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [], [pid 5586] <... futex resumed>) = 0 [pid 5585] <... futex resumed>) = 1 [pid 5218] unlink("./10/binderfs" [pid 5611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5610] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5586] symlink("./file1", "./bus" [pid 5585] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... openat resumed>) = 3 [pid 5610] memfd_create("syzkaller", 0 [pid 5218] <... unlink resumed>) = 0 [pid 5611] write(3, "1000", 4 [pid 5218] getdents64(3, [pid 5611] <... write resumed>) = 4 [pid 5611] close(3 [pid 5610] <... memfd_create resumed>) = 3 [pid 5586] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5218] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5611] <... close resumed>) = 0 [pid 5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5610] <... mmap resumed>) = 0x7f376bc00000 [pid 5611] write(1, "executing program\n", 18 [pid 5586] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] close(3) = 0 executing program [pid 5586] <... futex resumed>) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5218] rmdir("./10" [pid 5611] <... write resumed>) = 18 [pid 5585] exit_group(0 [pid 5611] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] <... futex resumed>) = ? [pid 5585] <... exit_group resumed>) = ? [pid 5218] <... rmdir resumed>) = 0 [pid 5611] <... futex resumed>) = 0 [pid 5218] mkdir("./11", 0777 [pid 5586] +++ exited with 0 +++ [pid 5611] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5218] <... mkdir resumed>) = 0 [pid 5611] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5611] <... mprotect resumed>) = 0 [pid 5218] <... openat resumed>) = 3 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5612]}, 88) = 5612 [pid 5611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5608] +++ exited with 0 +++ [pid 5585] +++ exited with 0 +++ [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5585, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=38 /* 0.38 s */} --- [pid 5217] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 5612 attached [pid 5218] ioctl(3, LOOP_CLR_FD) = 0 [ 89.343765][ T5586] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5612] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5218] close(3 [pid 5612] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [], [pid 5217] <... restart_syscall resumed>) = 0 [pid 5602] <... write resumed>) = 20699119 [pid 5612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5612] memfd_create("syzkaller", 0) = 3 [pid 5217] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5602] munmap(0x7f376bc00000, 138412032 [pid 5612] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5612] <... mmap resumed>) = 0x7f376bc00000 [pid 5602] <... munmap resumed>) = 0 [pid 5217] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(3, [pid 5602] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5602] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5217] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5602] close(3 [pid 5217] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5602] <... close resumed>) = 0 [pid 5602] close(4) = 0 [pid 5602] mkdir("./bus", 0777) = 0 [ 89.460467][ T5602] loop1: detected capacity change from 0 to 40427 [ 89.484949][ T5602] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 89.508047][ T5602] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 5602] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [ 89.588591][ T5602] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5217] <... umount2 resumed>) = 0 [pid 5217] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5217] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5217] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5217] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5217] getdents64(4, [pid 5218] <... close resumed>) = 0 [pid 5217] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5217] close(4./strace-static-x86_64: Process 5617 attached ) = 0 [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5617 [pid 5217] rmdir("./10/bus" [pid 5617] set_robust_list(0x55556d6356a0, 24 [pid 5602] <... mount resumed>) = 0 [pid 5617] <... set_robust_list resumed>) = 0 [pid 5617] chdir("./11" [pid 5602] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5617] <... chdir resumed>) = 0 [pid 5602] chdir("./bus") = 0 [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5617] setpgid(0, 0 [pid 5602] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5617] <... setpgid resumed>) = 0 [pid 5602] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5600] <... futex resumed>) = 0 [pid 5602] mkdir("./bus", 000 [pid 5600] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5602] <... mkdir resumed>) = 0 [pid 5217] <... rmdir resumed>) = 0 [pid 5617] <... openat resumed>) = 3 [pid 5602] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] write(3, "1000", 4 [pid 5602] <... futex resumed>) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5617] <... write resumed>) = 4 [pid 5602] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] close(3 [pid 5600] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5600] <... futex resumed>) = 1 [pid 5617] <... close resumed>) = 0 [pid 5602] <... futex resumed>) = 0 [pid 5600] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5617] symlink("/dev/binderfs", "./binderfs" [pid 5602] fspick(AT_FDCWD, ".", 0 [pid 5217] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5617] <... symlink resumed>) = 0 [pid 5602] <... fspick resumed>) = 4 [pid 5217] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5617] write(1, "executing program\n", 18 [pid 5602] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] unlink("./10/binderfs" [pid 5617] <... write resumed>) = 18 [pid 5602] <... futex resumed>) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5617] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5602] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... unlink resumed>) = 0 [pid 5617] <... futex resumed>) = 0 [pid 5602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5600] <... futex resumed>) = 0 [pid 5617] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5602] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5600] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] getdents64(3, [pid 5617] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5602] <... fsconfig resumed>) = 0 [pid 5217] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5617] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5602] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] close(3 [pid 5617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5602] <... futex resumed>) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5617] <... mmap resumed>) = 0x7f3774034000 [pid 5602] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... close resumed>) = 0 [pid 5617] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5600] <... futex resumed>) = 0 [ 89.722170][ T5602] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.737932][ T5602] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 5217] rmdir("./10" [pid 5617] <... mprotect resumed>) = 0 [pid 5602] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5600] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] <... rmdir resumed>) = 0 [pid 5617] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5217] mkdir("./11", 0777 [pid 5617] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5217] <... mkdir resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5618 attached [pid 5217] ioctl(3, LOOP_CLR_FD [pid 5617] <... clone3 resumed> => {parent_tid=[5618]}, 88) = 5618 [pid 5217] <... ioctl resumed>) = 0 [pid 5617] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5217] close(3 [pid 5618] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5617] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... rseq resumed>) = 0 [pid 5617] <... futex resumed>) = 0 [pid 5617] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5618] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5618] memfd_create("syzkaller", 0 [pid 5600] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... memfd_create resumed>) = 3 [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5600] <... futex resumed>) = 0 [pid 5618] <... mmap resumed>) = 0x7f376bc00000 [pid 5600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5600] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5619 attached => {parent_tid=[5619]}, 88) = 5619 [pid 5619] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5600] rt_sigprocmask(SIG_SETMASK, [], [pid 5619] <... rseq resumed>) = 0 [pid 5600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5619] set_robust_list(0x7f37740339a0, 24 [pid 5600] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5619] <... set_robust_list resumed>) = 0 [pid 5600] <... futex resumed>) = 0 [pid 5619] rt_sigprocmask(SIG_SETMASK, [], [pid 5600] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5619] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5619] memfd_create("syzkaller", 0) = 5 [pid 5619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5619] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5619] munmap(0x7f376bc00000, 138412032) = 0 [pid 5619] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5619] close(5 [pid 5602] <... fsconfig resumed>) = 0 [pid 5602] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5602] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5619] <... close resumed>) = 0 [pid 5619] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5619] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5602] <... futex resumed>) = 0 [pid 5600] <... futex resumed>) = 1 [pid 5602] symlink("./file1", "./bus" [pid 5600] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] <... close resumed>) = 0 [pid 5217] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5602] <... symlink resumed>) = -1 EEXIST (File exists) ./strace-static-x86_64: Process 5620 attached [pid 5217] <... clone resumed>, child_tidptr=0x55556d635690) = 5620 [pid 5620] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5620] chdir("./11" [pid 5602] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5620] <... chdir resumed>) = 0 [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5602] <... futex resumed>) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5620] <... prctl resumed>) = 0 [pid 5620] setpgid(0, 0) = 0 [pid 5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5602] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] exit_group(0 [pid 5620] <... openat resumed>) = 3 [pid 5619] <... futex resumed>) = ? [pid 5602] <... futex resumed>) = ? [pid 5600] <... exit_group resumed>) = ? [pid 5619] +++ exited with 0 +++ [pid 5602] +++ exited with 0 +++ [pid 5620] write(3, "1000", 4) = 4 [pid 5620] close(3) = 0 [pid 5620] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5620] write(1, "executing program\n", 18 [pid 5600] +++ exited with 0 +++ executing program [pid 5620] <... write resumed>) = 18 [pid 5215] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5600, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5620] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... write resumed>) = 20699119 [pid 5620] <... futex resumed>) = 0 [pid 5610] munmap(0x7f376bc00000, 138412032 [pid 5620] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5215] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5620] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5215] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5620] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5215] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5620] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5215] <... openat resumed>) = 3 [pid 5620] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5215] newfstatat(3, "", [pid 5620] <... mmap resumed>) = 0x7f3774034000 [pid 5215] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5620] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5215] getdents64(3, [pid 5620] <... mprotect resumed>) = 0 [pid 5215] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5620] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5215] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5620] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5620] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5621]}, 88) = 5621 [pid 5620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5620] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5620] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5621 attached [ 90.048605][ T5602] F2FS-fs (loop1): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5621] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5621] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5621] rt_sigprocmask(SIG_SETMASK, [], [pid 5610] <... munmap resumed>) = 0 [pid 5621] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5621] memfd_create("syzkaller", 0 [pid 5610] <... openat resumed>) = 4 [pid 5621] <... memfd_create resumed>) = 3 [pid 5621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] ioctl(4, LOOP_SET_FD, 3 [pid 5621] <... mmap resumed>) = 0x7f376bc00000 [pid 5610] <... ioctl resumed>) = 0 [pid 5610] close(3) = 0 [pid 5610] close(4) = 0 [pid 5610] mkdir("./bus", 0777) = 0 [ 90.128889][ T5610] loop2: detected capacity change from 0 to 40427 [ 90.166884][ T5610] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [pid 5610] mount("/dev/loop2", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [ 90.191700][ T5610] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5215] <... umount2 resumed>) = 0 [pid 5215] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./11/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5215] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5215] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5215] close(4) = 0 [pid 5215] rmdir("./11/bus") = 0 [pid 5215] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5215] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] unlink("./11/binderfs") = 0 [pid 5215] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5215] close(3) = 0 [pid 5215] rmdir("./11") = 0 [pid 5215] mkdir("./12", 0777) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5215] ioctl(3, LOOP_CLR_FD) = 0 [ 90.249737][ T5610] F2FS-fs (loop2): Found nat_bits in checkpoint [pid 5215] close(3 [pid 5612] <... write resumed>) = 20699119 [pid 5612] munmap(0x7f376bc00000, 138412032) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5612] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5612] close(3) = 0 [pid 5612] close(4) = 0 [pid 5612] mkdir("./bus", 0777 [pid 5610] <... mount resumed>) = 0 [ 90.408701][ T5610] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 90.415790][ T5610] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.429992][ T5612] loop0: detected capacity change from 0 to 40427 [pid 5612] <... mkdir resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5612] mount("/dev/loop0", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5610] <... openat resumed>) = 3 [pid 5610] chdir("./bus" [pid 5621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5610] <... chdir resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5610] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5609] <... futex resumed>) = 0 [pid 5610] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] <... futex resumed>) = 0 [pid 5610] mkdir("./bus", 000 [pid 5609] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... mkdir resumed>) = 0 [pid 5610] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5609] <... futex resumed>) = 0 [pid 5610] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] fspick(AT_FDCWD, ".", 0 [pid 5609] <... futex resumed>) = 0 [pid 5610] <... fspick resumed>) = 4 [pid 5609] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [pid 5609] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5609] <... futex resumed>) = 0 [pid 5609] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... fsconfig resumed>) = 0 [pid 5610] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5609] <... futex resumed>) = 0 [ 90.459986][ T5612] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 90.467770][ T5612] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 5609] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5609] <... futex resumed>) = 0 [ 90.512246][ T5612] F2FS-fs (loop0): Found nat_bits in checkpoint [pid 5609] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5609] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5609] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5629]}, 88) = 5629 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5629 attached [pid 5629] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5629] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5629] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5629] memfd_create("syzkaller", 0) = 5 [pid 5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5629] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5215] <... close resumed>) = 0 [pid 5215] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5631 attached [pid 5612] <... mount resumed>) = 0 [pid 5610] <... fsconfig resumed>) = 0 [pid 5215] <... clone resumed>, child_tidptr=0x55556d635690) = 5631 [pid 5612] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5612] chdir("./bus" [pid 5631] set_robust_list(0x55556d6356a0, 24 [pid 5610] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... chdir resumed>) = 0 [pid 5631] <... set_robust_list resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5610] <... futex resumed>) = 0 [pid 5631] chdir("./12") = 0 [pid 5610] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... futex resumed>) = 0 [pid 5612] <... futex resumed>) = 1 [pid 5612] mkdir("./bus", 000 [pid 5611] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] <... prctl resumed>) = 0 [pid 5631] setpgid(0, 0) = 0 [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5611] <... futex resumed>) = 0 [pid 5611] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... mkdir resumed>) = 0 [pid 5612] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] write(3, "1000", 4) = 4 [pid 5612] <... futex resumed>) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5612] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] close(3 [pid 5611] <... futex resumed>) = 0 [pid 5631] <... close resumed>) = 0 [pid 5611] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5631] write(1, "executing program\n", 18 [pid 5618] <... write resumed>) = 20699119 [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5631] <... write resumed>) = 18 [pid 5631] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5612] fspick(AT_FDCWD, ".", 0 [pid 5631] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, [pid 5618] munmap(0x7f376bc00000, 138412032 [pid 5631] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5612] <... fspick resumed>) = 4 [pid 5631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5629] <... write resumed>) = 2097152 [pid 5612] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5612] <... futex resumed>) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5631] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5629] munmap(0x7f376bc00000, 138412032 [pid 5631] <... mprotect resumed>) = 0 [pid 5611] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5629] <... munmap resumed>) = 0 [pid 5631] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5611] <... futex resumed>) = 0 [pid 5611] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [pid 5631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5612] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5611] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5632 attached [pid 5612] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5611] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5611] <... futex resumed>) = 0 [pid 5632] <... rseq resumed>) = 0 [pid 5632] set_robust_list(0x7f37740549a0, 24 [pid 5631] <... clone3 resumed> => {parent_tid=[5632]}, 88) = 5632 [ 90.679213][ T5612] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 90.698478][ T5612] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 5611] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... set_robust_list resumed>) = 0 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], [pid 5629] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5629] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5631] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] close(5 [pid 5631] <... futex resumed>) = 0 [pid 5618] <... munmap resumed>) = 0 [pid 5632] rt_sigprocmask(SIG_SETMASK, [], [pid 5631] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5632] memfd_create("syzkaller", 0) = 3 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5618] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5618] ioctl(4, LOOP_SET_FD, 3 [pid 5629] <... close resumed>) = 0 [pid 5629] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... ioctl resumed>) = 0 [pid 5629] <... futex resumed>) = 1 [pid 5618] close(3 [pid 5609] <... futex resumed>) = 0 [pid 5618] <... close resumed>) = 0 [pid 5609] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] close(4 [pid 5610] <... futex resumed>) = 0 [pid 5609] <... futex resumed>) = 1 [pid 5618] <... close resumed>) = 0 [pid 5610] symlink("./file1", "./bus" [pid 5609] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5629] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5618] mkdir("./bus", 0777) = 0 [pid 5611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [ 90.782589][ T5618] loop4: detected capacity change from 0 to 40427 [ 90.796557][ T5610] F2FS-fs (loop2): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [pid 5618] mount("/dev/loop4", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5610] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5610] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... futex resumed>) = 0 [pid 5609] exit_group(0 [pid 5629] <... futex resumed>) = ? [pid 5609] <... exit_group resumed>) = ? [pid 5629] +++ exited with 0 +++ [pid 5610] <... futex resumed>) = ? [pid 5610] +++ exited with 0 +++ [pid 5609] +++ exited with 0 +++ [pid 5611] <... futex resumed>) = 0 [pid 5611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5216] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5609, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=44 /* 0.44 s */} --- [pid 5611] <... mmap resumed>) = 0x7f3774013000 [pid 5216] restart_syscall(<... resuming interrupted clone ...> [pid 5611] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE [pid 5216] <... restart_syscall resumed>) = 0 [pid 5611] <... mprotect resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} [pid 5216] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5633 attached ) = 3 [pid 5633] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5611] <... clone3 resumed> => {parent_tid=[5633]}, 88) = 5633 [pid 5216] newfstatat(3, "", [ 90.824327][ T5618] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [pid 5611] rt_sigprocmask(SIG_SETMASK, [], [pid 5633] <... rseq resumed>) = 0 [pid 5611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(3, [pid 5633] set_robust_list(0x7f37740339a0, 24 [pid 5611] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] <... set_robust_list resumed>) = 0 [pid 5611] <... futex resumed>) = 0 [pid 5633] rt_sigprocmask(SIG_SETMASK, [], [pid 5611] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5216] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5633] memfd_create("syzkaller", 0 [pid 5216] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5633] <... memfd_create resumed>) = 5 [pid 5633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 90.868063][ T5618] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 5612] <... fsconfig resumed>) = 0 [pid 5633] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5612] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.920688][ T5618] F2FS-fs (loop4): Found nat_bits in checkpoint [pid 5612] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5621] <... write resumed>) = 20699119 [pid 5621] munmap(0x7f376bc00000, 138412032 [pid 5633] <... write resumed>) = 2097152 [pid 5621] <... munmap resumed>) = 0 [pid 5618] <... mount resumed>) = 0 [pid 5618] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5633] munmap(0x7f376bc00000, 138412032) = 0 [pid 5621] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5618] <... openat resumed>) = 3 [pid 5633] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5621] <... openat resumed>) = 4 [pid 5618] chdir("./bus" [pid 5633] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5618] <... chdir resumed>) = 0 [ 90.995564][ T5618] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 91.002704][ T5618] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [pid 5633] close(5 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5618] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5621] ioctl(4, LOOP_SET_FD, 3 [pid 5618] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5621] <... ioctl resumed>) = 0 [pid 5618] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5617] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5618] mkdir("./bus", 000 [pid 5617] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5633] <... close resumed>) = 0 [pid 5633] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] close(3 [pid 5618] <... mkdir resumed>) = 0 [pid 5216] <... umount2 resumed>) = 0 [pid 5633] <... futex resumed>) = 1 [pid 5621] <... close resumed>) = 0 [pid 5618] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... futex resumed>) = 0 [pid 5216] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5633] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5621] close(4 [pid 5618] <... futex resumed>) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5611] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5621] <... close resumed>) = 0 [pid 5617] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = 0 [pid 5611] <... futex resumed>) = 1 [pid 5621] mkdir("./bus", 0777 [ 91.058815][ T5621] loop3: detected capacity change from 0 to 40427 [pid 5618] fspick(AT_FDCWD, ".", 0 [pid 5617] <... futex resumed>) = 0 [pid 5612] symlink("./file1", "./bus" [pid 5611] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] newfstatat(AT_FDCWD, "./11/bus", [pid 5621] <... mkdir resumed>) = 0 [pid 5617] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5621] mount("/dev/loop3", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota" [pid 5618] <... fspick resumed>) = 4 [pid 5216] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5618] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5618] <... futex resumed>) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5216] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5617] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5617] <... futex resumed>) = 0 [pid 5216] <... openat resumed>) = 4 [pid 5617] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] getdents64(4, [pid 5618] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5618] <... fsconfig resumed>) = 0 [pid 5216] getdents64(4, [pid 5618] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5618] <... futex resumed>) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5216] close(4 [pid 5617] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... close resumed>) = 0 [pid 5617] <... futex resumed>) = 0 [pid 5617] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] rmdir("./11/bus") = 0 [pid 5618] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5216] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5216] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] unlink("./11/binderfs") = 0 [pid 5216] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5216] close(3) = 0 [pid 5216] rmdir("./11") = 0 [pid 5216] mkdir("./12", 0777) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5216] ioctl(3, LOOP_CLR_FD) = 0 [pid 5216] close(3 [pid 5611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5612] <... symlink resumed>) = -1 EEXIST (File exists) [ 91.109466][ T5612] F2FS-fs (loop0): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 91.124250][ T5621] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [pid 5612] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] exit_group(0) = ? [pid 5633] <... futex resumed>) = ? [pid 5633] +++ exited with 0 +++ [pid 5612] <... futex resumed>) = ? [pid 5612] +++ exited with 0 +++ [pid 5611] +++ exited with 0 +++ [pid 5214] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5611, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5214] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5214] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5214] newfstatat(3, "", [pid 5617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5617] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] getdents64(3, [pid 5617] <... futex resumed>) = 0 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5214] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5617] <... mmap resumed>) = 0x7f3774013000 [pid 5617] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5617] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0}./strace-static-x86_64: Process 5641 attached => {parent_tid=[5641]}, 88) = 5641 [pid 5641] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5617] rt_sigprocmask(SIG_SETMASK, [], [pid 5641] <... rseq resumed>) = 0 [pid 5617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5641] set_robust_list(0x7f37740339a0, 24 [pid 5617] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... set_robust_list resumed>) = 0 [pid 5641] rt_sigprocmask(SIG_SETMASK, [], [pid 5617] <... futex resumed>) = 0 [pid 5641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5641] memfd_create("syzkaller", 0 [pid 5617] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5641] <... memfd_create resumed>) = 5 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 91.169084][ T5621] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.248229][ T5621] F2FS-fs (loop3): Found nat_bits in checkpoint [pid 5641] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5641] munmap(0x7f376bc00000, 138412032 [pid 5618] <... fsconfig resumed>) = 0 [pid 5641] <... munmap resumed>) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5618] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5618] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5641] close(5) = 0 [pid 5641] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5617] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... futex resumed>) = 0 [pid 5617] <... futex resumed>) = 1 [pid 5617] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5641] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5618] symlink("./file1", "./bus" [pid 5632] <... write resumed>) = 20699119 [pid 5632] munmap(0x7f376bc00000, 138412032 [pid 5214] <... umount2 resumed>) = 0 [pid 5214] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5632] <... munmap resumed>) = 0 [pid 5214] newfstatat(AT_FDCWD, "./11/bus", [pid 5618] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5618] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5618] <... futex resumed>) = 0 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5621] <... mount resumed>) = 0 [pid 5618] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] exit_group(0 [pid 5214] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5641] <... futex resumed>) = ? [pid 5618] <... futex resumed>) = ? [pid 5617] <... exit_group resumed>) = ? [pid 5216] <... close resumed>) = 0 [pid 5618] +++ exited with 0 +++ [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5214] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5621] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5643 attached [pid 5641] +++ exited with 0 +++ [pid 5632] <... openat resumed>) = 4 [pid 5617] +++ exited with 0 +++ [pid 5214] <... openat resumed>) = 4 [pid 5643] set_robust_list(0x55556d6356a0, 24 [pid 5621] <... openat resumed>) = 3 [pid 5218] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=43 /* 0.43 s */} --- [pid 5214] newfstatat(4, "", [pid 5643] <... set_robust_list resumed>) = 0 [ 91.407700][ T5618] F2FS-fs (loop4): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 91.431007][ T5621] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 91.446810][ T5621] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [pid 5632] ioctl(4, LOOP_SET_FD, 3 [pid 5218] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5643] chdir("./12" [pid 5621] chdir("./bus" [pid 5216] <... clone resumed>, child_tidptr=0x55556d635690) = 5643 [pid 5214] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5643] <... chdir resumed>) = 0 [pid 5621] <... chdir resumed>) = 0 [pid 5218] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] getdents64(4, [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5621] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5643] <... prctl resumed>) = 0 [pid 5621] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5214] getdents64(4, [pid 5643] setpgid(0, 0 [pid 5621] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... getdents64 resumed>0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5621] <... futex resumed>) = 1 [pid 5214] close(4 [pid 5643] <... setpgid resumed>) = 0 [pid 5621] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5214] <... close resumed>) = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5214] rmdir("./11/bus") = 0 [pid 5643] <... openat resumed>) = 3 [pid 5632] <... ioctl resumed>) = 0 [pid 5620] <... futex resumed>) = 0 [pid 5218] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5643] write(3, "1000", 4 [pid 5632] close(3 [pid 5620] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... openat resumed>) = 3 [pid 5214] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5643] <... write resumed>) = 4 [pid 5632] <... close resumed>) = 0 [pid 5621] <... futex resumed>) = 0 [pid 5620] <... futex resumed>) = 1 [pid 5643] close(3 [pid 5632] close(4 [pid 5621] mkdir("./bus", 000 [pid 5620] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] newfstatat(3, "", [pid 5214] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5643] <... close resumed>) = 0 [pid 5632] <... close resumed>) = 0 [pid 5632] mkdir("./bus", 0777 [pid 5643] symlink("/dev/binderfs", "./binderfs" [pid 5632] <... mkdir resumed>) = 0 [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5214] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5632] mount("/dev/loop1", "./bus", "f2fs", MS_SYNCHRONOUS|MS_NOATIME|MS_SILENT|MS_LAZYTIME, "fastboot,quota"executing program [pid 5643] <... symlink resumed>) = 0 [pid 5218] getdents64(3, [pid 5214] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5643] write(1, "executing program\n", 18 [pid 5218] <... getdents64 resumed>0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5214] unlink("./11/binderfs" [pid 5643] <... write resumed>) = 18 [pid 5621] <... mkdir resumed>) = 0 [pid 5218] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... unlink resumed>) = 0 [pid 5643] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] <... futex resumed>) = 0 [pid 5621] <... futex resumed>) = 1 [pid 5620] <... futex resumed>) = 0 [pid 5214] getdents64(3, [pid 5643] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5621] fspick(AT_FDCWD, ".", 0 [pid 5620] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... getdents64 resumed>0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5643] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5620] <... futex resumed>) = 0 [pid 5214] close(3 [pid 5643] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5620] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5621] <... fspick resumed>) = 4 [pid 5643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5621] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... close resumed>) = 0 [pid 5643] <... mmap resumed>) = 0x7f3774034000 [pid 5214] rmdir("./11" [pid 5643] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE [pid 5621] <... futex resumed>) = 1 [pid 5620] <... futex resumed>) = 0 [pid 5643] <... mprotect resumed>) = 0 [pid 5621] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5620] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... rmdir resumed>) = 0 [pid 5643] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5620] <... futex resumed>) = 0 [pid 5621] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5620] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5621] <... fsconfig resumed>) = 0 [pid 5643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} [pid 5621] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] mkdir("./12", 0777./strace-static-x86_64: Process 5644 attached [pid 5621] <... futex resumed>) = 1 [pid 5620] <... futex resumed>) = 0 [pid 5644] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5643] <... clone3 resumed> => {parent_tid=[5644]}, 88) = 5644 [pid 5621] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5620] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... mkdir resumed>) = 0 [pid 5644] <... rseq resumed>) = 0 [pid 5643] rt_sigprocmask(SIG_SETMASK, [], [pid 5621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5620] <... futex resumed>) = 0 [pid 5620] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] set_robust_list(0x7f37740549a0, 24 [pid 5643] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5621] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5643] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... set_robust_list resumed>) = 0 [pid 5643] <... futex resumed>) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [], [pid 5643] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5644] memfd_create("syzkaller", 0 [pid 5214] <... openat resumed>) = 3 [pid 5214] ioctl(3, LOOP_CLR_FD [pid 5644] <... memfd_create resumed>) = 3 [pid 5214] <... ioctl resumed>) = 0 [pid 5214] close(3 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 91.481636][ T5632] loop1: detected capacity change from 0 to 40427 [ 91.504675][ T5632] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 91.515627][ T5632] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [pid 5620] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5620] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5620] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774013000 [pid 5620] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5620] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5620] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5648]}, 88) = 5648 [pid 5620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5620] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5620] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5648 attached [pid 5648] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053) = 0 [pid 5648] set_robust_list(0x7f37740339a0, 24) = 0 [pid 5648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5648] memfd_create("syzkaller", 0) = 5 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [ 91.559327][ T5632] F2FS-fs (loop1): Found nat_bits in checkpoint [pid 5648] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5648] munmap(0x7f376bc00000, 138412032) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5648] close(5) = 0 [pid 5632] <... mount resumed>) = 0 [pid 5632] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5648] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5620] <... futex resumed>) = 0 [pid 5620] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5648] symlink("./file1", "./bus" [pid 5620] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] <... symlink resumed>) = -1 EEXIST (File exists) [pid 5648] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5632] <... openat resumed>) = 3 [pid 5620] <... futex resumed>) = 0 [pid 5648] futex(0x7f377412d6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5632] chdir("./bus") = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5632] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5631] <... futex resumed>) = 0 [pid 5632] mkdir("./bus", 000 [pid 5631] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5621] <... fsconfig resumed>) = 0 [pid 5632] <... mkdir resumed>) = 0 [pid 5632] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = 1 [pid 5621] <... futex resumed>) = 0 [pid 5632] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] <... futex resumed>) = 0 [pid 5621] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5620] exit_group(0) = ? [pid 5621] <... futex resumed>) = ? [pid 5621] +++ exited with 0 +++ [pid 5648] <... futex resumed>) = ? [pid 5648] +++ exited with 0 +++ [pid 5632] <... futex resumed>) = 0 [pid 5620] +++ exited with 0 +++ [pid 5632] fspick(AT_FDCWD, ".", 0 [pid 5217] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5620, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=47 /* 0.47 s */} --- [pid 5632] <... fspick resumed>) = 4 [pid 5632] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] restart_syscall(<... resuming interrupted clone ...> [pid 5632] <... futex resumed>) = 1 [pid 5632] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] <... futex resumed>) = 0 [pid 5631] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = 0 [pid 5631] <... futex resumed>) = 1 [pid 5632] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0 [pid 5631] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... fsconfig resumed>) = 0 [ 91.741486][ T5632] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 91.749683][ T5632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [pid 5632] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... umount2 resumed>) = 0 [pid 5632] <... futex resumed>) = 1 [pid 5632] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] <... futex resumed>) = 0 [pid 5631] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = 0 [pid 5631] <... futex resumed>) = 1 [pid 5632] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0 [pid 5631] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./11/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5217] <... restart_syscall resumed>) = 0 [pid 5217] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5218] <... openat resumed>) = 4 [pid 5217] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] newfstatat(4, "", [pid 5217] getdents64(3, 0x55556d636730 /* 4 entries */, 32768) = 104 [pid 5217] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5218] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] getdents64(4, 0x55556d63e770 /* 2 entries */, 32768) = 48 [pid 5218] getdents64(4, 0x55556d63e770 /* 0 entries */, 32768) = 0 [pid 5218] close(4) = 0 [pid 5218] rmdir("./11/bus") = 0 [pid 5218] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5218] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5218] unlink("./11/binderfs") = 0 [pid 5218] getdents64(3, 0x55556d636730 /* 0 entries */, 32768) = 0 [pid 5218] close(3) = 0 [pid 5218] rmdir("./11") = 0 [pid 5218] mkdir("./12", 0777) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5218] ioctl(3, LOOP_CLR_FD) = 0 [pid 5218] close(3 [pid 5631] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5631] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 91.808945][ T5217] ------------[ cut here ]------------ [ 91.814843][ T5217] kernel BUG at fs/f2fs/inode.c:896! [ 91.853753][ T5217] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 91.860759][ T5217] CPU: 1 UID: 0 PID: 5217 Comm: syz-executor605 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 91.871875][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 91.881944][ T5217] RIP: 0010:f2fs_evict_inode+0x1598/0x15c0 [ 91.887816][ T5217] Code: 6e 9b ab fd 31 ff 89 de e8 65 9b ab fd 40 84 ed 75 28 e8 5b 98 ab fd e9 3c ec ff ff e8 51 98 ab fd 90 0f 0b e8 49 98 ab fd 90 <0f> 0b e8 41 98 ab fd 90 0f 0b 90 e9 fc fe ff ff e8 33 98 ab fd e8 [ 91.907531][ T5217] RSP: 0018:ffffc90003497808 EFLAGS: 00010293 [ 91.913614][ T5217] RAX: ffffffff83e7f267 RBX: 0000000000000002 RCX: ffff88801a3e8000 [ 91.921681][ T5217] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 91.929659][ T5217] RBP: 0000000000000000 R08: ffffffff83e7ec50 R09: 1ffff1100efe9611 [ 91.937640][ T5217] R10: dffffc0000000000 R11: ffffed100efe9612 R12: ffff88807a834000 [ 91.945616][ T5217] R13: ffff888077f4b088 R14: ffff888077f4abe8 R15: dffffc0000000000 [ 91.953588][ T5217] FS: 000055556d6353c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 91.962507][ T5217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.969089][ T5217] CR2: 00007f376cbf9000 CR3: 00000000786a0000 CR4: 00000000003506f0 [ 91.977047][ T5217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.985001][ T5217] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.992959][ T5217] Call Trace: [ 91.996255][ T5217] [ 91.999176][ T5217] ? __die_body+0x88/0xe0 [ 92.003499][ T5217] ? die+0xcf/0x110 [ 92.007300][ T5217] ? do_trap+0x15a/0x3a0 [ 92.011530][ T5217] ? f2fs_evict_inode+0x1598/0x15c0 [ 92.016719][ T5217] ? do_error_trap+0x1dc/0x2c0 [ 92.021470][ T5217] ? f2fs_evict_inode+0x1598/0x15c0 [ 92.026659][ T5217] ? __pfx_do_error_trap+0x10/0x10 [ 92.031755][ T5217] ? report_bug+0x3e8/0x500 [ 92.036263][ T5217] ? handle_invalid_op+0x34/0x40 [ 92.041227][ T5217] ? f2fs_evict_inode+0x1598/0x15c0 [ 92.046424][ T5217] ? exc_invalid_op+0x38/0x50 [ 92.051092][ T5217] ? asm_exc_invalid_op+0x1a/0x20 [ 92.056107][ T5217] ? f2fs_evict_inode+0xf80/0x15c0 [ 92.061206][ T5217] ? f2fs_evict_inode+0x1597/0x15c0 [ 92.066392][ T5217] ? f2fs_evict_inode+0x1598/0x15c0 [ 92.071582][ T5217] ? f2fs_evict_inode+0x1597/0x15c0 [ 92.076768][ T5217] ? __pfx_wake_bit_function+0x10/0x10 [ 92.082301][ T5217] ? do_raw_spin_unlock+0x13c/0x8b0 [ 92.087486][ T5217] ? _raw_spin_unlock+0x28/0x50 [ 92.092325][ T5217] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 92.097685][ T5217] evict+0x532/0x950 [ 92.101573][ T5217] ? __pfx_lock_release+0x10/0x10 [ 92.106589][ T5217] ? __pfx_evict+0x10/0x10 [ 92.110997][ T5217] ? do_raw_spin_unlock+0x13c/0x8b0 [ 92.116180][ T5217] ? list_lru_del_obj+0x3b5/0x400 [ 92.121285][ T5217] evict_inodes+0x5f9/0x690 [ 92.125775][ T5217] ? __pfx_evict_inodes+0x10/0x10 [ 92.130787][ T5217] ? dput+0x37/0x2b0 [ 92.134674][ T5217] generic_shutdown_super+0x9d/0x2d0 [ 92.139955][ T5217] kill_block_super+0x44/0x90 [ 92.144646][ T5217] kill_f2fs_super+0x344/0x690 [ 92.149400][ T5217] ? __pfx_kill_f2fs_super+0x10/0x10 [ 92.154671][ T5217] ? shrinker_free+0x2ca/0x3d0 [ 92.159422][ T5217] deactivate_locked_super+0xc4/0x130 [ 92.164783][ T5217] cleanup_mnt+0x41f/0x4b0 [ 92.169188][ T5217] ? lockdep_hardirqs_on+0x99/0x150 [ 92.174407][ T5217] task_work_run+0x24f/0x310 [ 92.178984][ T5217] ? __pfx_task_work_run+0x10/0x10 [ 92.184085][ T5217] ? path_umount+0x284/0xf70 [ 92.188663][ T5217] ptrace_notify+0x2d2/0x380 [ 92.193243][ T5217] ? __pfx_path_umount+0x10/0x10 [ 92.198166][ T5217] ? __pfx_ptrace_notify+0x10/0x10 [ 92.203278][ T5217] ? __x64_sys_umount+0x123/0x170 [ 92.208286][ T5217] ? __pfx___x64_sys_umount+0x10/0x10 [ 92.213641][ T5217] syscall_exit_work+0xc6/0x190 [ 92.218566][ T5217] syscall_exit_to_user_mode+0x279/0x370 [ 92.224188][ T5217] do_syscall_64+0x100/0x230 [ 92.228763][ T5217] ? clear_bhb_loop+0x35/0x90 [ 92.233426][ T5217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.239319][ T5217] RIP: 0033:0x7f37740a00a7 [ 92.243722][ T5217] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 92.263338][ T5217] RSP: 002b:00007ffc120a25e8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 92.271740][ T5217] RAX: 0000000000000000 RBX: 0000000000015fbb RCX: 00007f37740a00a7 [ 92.279698][ T5217] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc120a26a0 [ 92.287654][ T5217] RBP: 00007ffc120a26a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.295614][ T5217] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc120a3750 [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 5631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5214] <... close resumed>) = 0 [ 92.303573][ T5217] R13: 000055556d636700 R14: 431bde82d7b634db R15: 00007ffc120a36f4 [ 92.311623][ T5217] [ 92.314626][ T5217] Modules linked in: [ 92.335565][ T5217] ---[ end trace 0000000000000000 ]--- [ 92.342045][ T5217] RIP: 0010:f2fs_evict_inode+0x1598/0x15c0 [pid 5214] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5631] <... mmap resumed>) = 0x7f3774013000 [pid 5631] mprotect(0x7f3774014000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774033990, parent_tid=0x7f3774033990, exit_signal=0, stack=0x7f3774013000, stack_size=0x20300, tls=0x7f37740336c0} => {parent_tid=[5650]}, 88) = 5650 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5631] futex(0x7f377412d6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] futex(0x7f377412d6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5651 attached ./strace-static-x86_64: Process 5650 attached [pid 5651] set_robust_list(0x55556d6356a0, 24 [pid 5650] rseq(0x7f3774033fe0, 0x20, 0, 0x53053053 [pid 5214] <... clone resumed>, child_tidptr=0x55556d635690) = 5651 [pid 5650] <... rseq resumed>) = 0 [pid 5650] set_robust_list(0x7f37740339a0, 24 [pid 5632] <... fsconfig resumed>) = 0 [pid 5651] <... set_robust_list resumed>) = 0 [pid 5650] <... set_robust_list resumed>) = 0 [pid 5650] rt_sigprocmask(SIG_SETMASK, [], [pid 5651] chdir("./12" [pid 5650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5650] memfd_create("syzkaller", 0 [pid 5651] <... chdir resumed>) = 0 [pid 5632] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5632] futex(0x7f377412d6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5651] <... prctl resumed>) = 0 [pid 5650] <... memfd_create resumed>) = 5 [pid 5651] setpgid(0, 0 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5651] <... setpgid resumed>) = 0 [pid 5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5650] <... mmap resumed>) = 0x7f376bc00000 [pid 5651] <... openat resumed>) = 3 [pid 5651] write(3, "1000", 4) = 4 [pid 5651] close(3) = 0 [pid 5651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5650] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5651] write(1, "executing program\n", 18executing program ) = 18 [pid 5651] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5651] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5651] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5651] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5651] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0}./strace-static-x86_64: Process 5652 attached [ 92.347928][ T5217] Code: 6e 9b ab fd 31 ff 89 de e8 65 9b ab fd 40 84 ed 75 28 e8 5b 98 ab fd e9 3c ec ff ff e8 51 98 ab fd 90 0f 0b e8 49 98 ab fd 90 <0f> 0b e8 41 98 ab fd 90 0f 0b 90 e9 fc fe ff ff e8 33 98 ab fd e8 [ 92.370325][ T5217] RSP: 0018:ffffc90003497808 EFLAGS: 00010293 => {parent_tid=[5652]}, 88) = 5652 [pid 5218] <... close resumed>) = 0 [pid 5651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5651] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5651] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5652] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053 [pid 5218] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5652] <... rseq resumed>) = 0 [pid 5652] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5652] memfd_create("syzkaller", 0 [pid 5218] <... clone resumed>, child_tidptr=0x55556d635690) = 5653 [pid 5652] <... memfd_create resumed>) = 3 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 ./strace-static-x86_64: Process 5653 attached [pid 5650] <... write resumed>) = 2097152 [pid 5653] set_robust_list(0x55556d6356a0, 24) = 0 [pid 5653] chdir("./12" [ 92.399873][ T5217] RAX: ffffffff83e7f267 RBX: 0000000000000002 RCX: ffff88801a3e8000 [ 92.408255][ T5217] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 92.427673][ T5217] RBP: 0000000000000000 R08: ffffffff83e7ec50 R09: 1ffff1100efe9611 [ 92.436581][ T5217] R10: dffffc0000000000 R11: ffffed100efe9612 R12: ffff88807a834000 [pid 5650] munmap(0x7f376bc00000, 138412032 [pid 5653] <... chdir resumed>) = 0 [pid 5650] <... munmap resumed>) = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5650] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5653] <... prctl resumed>) = 0 [pid 5650] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5650] close(5 [pid 5653] setpgid(0, 0) = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5653] write(3, "1000", 4) = 4 [pid 5653] close(3) = 0 [pid 5653] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5653] write(1, "executing program\n", 18) = 18 [pid 5653] futex(0x7f377412d6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] rt_sigaction(SIGRT_1, {sa_handler=0x7f37740c5260, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f37740b6410}, NULL, 8) = 0 [pid 5653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3774034000 [pid 5653] mprotect(0x7f3774035000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5653] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3774054990, parent_tid=0x7f3774054990, exit_signal=0, stack=0x7f3774034000, stack_size=0x20300, tls=0x7f37740546c0} => {parent_tid=[5654]}, 88) = 5654 [pid 5653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5653] futex(0x7f377412d6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] futex(0x7f377412d6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5654 attached [pid 5654] rseq(0x7f3774054fe0, 0x20, 0, 0x53053053) = 0 [pid 5654] set_robust_list(0x7f37740549a0, 24) = 0 [pid 5654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5654] memfd_create("syzkaller", 0 [pid 5650] <... close resumed>) = 0 [pid 5654] <... memfd_create resumed>) = 3 [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f376bc00000 [pid 5650] futex(0x7f377412d6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [ 92.445700][ T5217] R13: ffff888077f4b088 R14: ffff888077f4abe8 R15: dffffc0000000000 [ 92.454659][ T5217] FS: 000055556d6353c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 92.463981][ T5217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.473114][ T5217] CR2: 00007f376bda6000 CR3: 00000000786a0000 CR4: 00000000003506f0 [ 92.481552][ T5217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.489926][ T5217] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.498404][ T5217] Kernel panic - not syncing: Fatal exception [ 92.504707][ T5217] Kernel Offset: disabled [ 92.509021][ T5217] Rebooting in 86400 seconds..